PT-2026-76874

CVE-2026-75587

Published

2026-08-17

Updated

2026-08-19

Description by

CVSS 3.1

3.6

Low

MetricsAV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mattermost Desktop App versions prior to 6.2.2.0

Description The application fails to redact the pre-auth secret during the generation of a diagnostics report. A local attacker with access to the user's log files or diagnostics report can obtain the plaintext pre-auth secret for a connected server by inspecting the Server Connectivity (Step-3) diagnostics output.

Recommendations Update Mattermost Desktop App to version 6.2.2.0 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Juho Forsén

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers