CVE-2026-93850

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.7.0 through 11.7.10 Mattermost versions 11.8.0 through 11.8.5 Mattermost versions 11.9.0 through 11.9.1 Mattermost versions 11.10.0 through 11.10.1

Description An authenticated user can cause a denial of service by uploading a specially crafted PDF file. The issue occurs because the software fails to limit the volume of text extracted from the PDF, allowing a compressed content stream to expand into an excessively large amount of text, which exhausts server memory.

Recommendations Update Mattermost versions 11.7.0 through 11.7.10 to a version newer than 11.7.10. Update Mattermost versions 11.8.0 through 11.8.5 to a version newer than 11.8.5. Update Mattermost versions 11.9.0 through 11.9.1 to a version newer than 11.9.1. Update Mattermost versions 11.10.0 through 11.10.1 to a version newer than 11.10.1.