SSRF in Mattermost
CVE-2026-4339
Mattermost versions 10.11.x <= 10.11.18, 11.6.x <= 11.6.3, 11.5.x <= 11.5.6 fail to validate attachment URLs against internal or private IP ranges in the Mattermost Agents plugin MCP server which allows an attacker with access to the MCP server in stdio mode to perform server-side request forgery (SSRF) and exfiltrate data from internal network services via supplying internal URLs as file attachments in post creation requests.. Mattermost Advisory ID: MMSA-2026-00635
Vulnerability class: SSRF (Server-Side Request Forgery)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.001 (2.7th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 3rd percentile — 2.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- Mattermost — versions 10.11.0, 11.6.0, 11.5.0
- Mattermost Server
Weakness classification (CWE)
References
- mattermost.com/security-updates (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-4339?
- CVE-2026-4339 is a medium-severity vulnerability in Mattermost, classified under Server-Side Request Forgery (SSRF). CVSS score: 6.5/10. Published 2026-06-26.
- How severe is CVE-2026-4339?
- Medium severity. CVSS v3 base score is 6.5 out of 10.