CVE-2026-4055

Name of the Vulnerable Software and Affected Versions Mattermost versions 11.5.x through 11.5.1

Description An incorrect authorization issue exists during the creation of a playbook run. The system fails to validate the team-level run create permission against the target team. This allows an authenticated team member to create runs in teams where they lack the necessary permissions by specifying a different team ID in the run creation API request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.