CVE-2026-2476 — MS Teams plugin sensitive config values not properly masked in support packets
Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin sett…
Published: 2026-03-16 · CVSS: 7.6 · CVSS 3.1
Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original plugin settings via exported configuration data. Mattermost Advisory ID: MMSA-2026-00606
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7