CVE-2026-22880
Mobile SSO authentication flow allows credential theft via malicious server
CVSS Score
6.1
EPSS Score
0.0%
EPSS Percentile
0th
Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an attacker controlling a malicious Mattermost server to steal user credentials for a legitimate Mattermost server via relaying the SSO code exchange flow through the mobile application. Mattermost Advisory ID: MMSA-2025-00564
| CWE | CWE-352 |
| Vendor | mattermost |
| Product | mattermost |
| Published | May 21, 2026 |
Stay Ahead of the Next One
Get instant alerts for mattermost mattermost
Be the first to know when new medium vulnerabilities affecting mattermost mattermost are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
Mattermost / Mattermost
0 ≤ 2.0.37 0 ≤ 11.0.4 0 ≤ 11.1.3 0 ≤ 11.3.2 0 ≤ 10.11.11
Credits
Doyensec