← CVE Intelligence

CVE-2026-8683

Overly long URLs crash the Mattermost Desktop App PUBLISHED

Description (CNA)

Mattermost Desktop App versions <=6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to crash the application via including a script to call window.open on a very large URL. Mattermost Advisory ID: MMSA-2026-00652

Affected (CNA)

Vendor / productVersions
Mattermost / Mattermostaffected 0 through 5.5.13; unaffected 6.2.0; unaffected 5.13.6.0

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.