All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-75587
LOWpublished 2026-08-17 23:16 UTC · 10 hours ago
3.6
CVSS / 10
// description
Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716
// weaknesses (CWE)
- CWE-200