PT-2026-60738 · Mattermost · Mattermost Desktop App

Game0V3R

·

CVE-2026-9602

·

Published

2026-07-17

·

Updated

2026-07-17

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 6.2 Mattermost Desktop App version 6.0.2 Mattermost Desktop App version 5.6.13.0
Description The application fails to validate payloads sent from the Mattermost Web App to the Desktop App. This allows a malicious server owner to crash the Desktop App by modifying a method payload to be malformed.
Recommendations Update Mattermost Desktop App to a version newer than 6.2. Update Mattermost Desktop App to a version newer than 6.0.2. Update Mattermost Desktop App to a version newer than 5.6.13.0.

Exploit

Fix

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2026-9602

Affected Products

Mattermost Desktop App