Live › vulnerability › CVE-2026-116516
Go to dashboardMattermost versions up to 11.9 and several 11.x builds fail to check the length of Zoom chat lines before slicing them. An authenticated user who summarizes a Zoom chat transcription with short continuation lines can crash the Agents plugin.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 14:30 UTC. All times on this page are UTC.
Teams running self-hosted Mattermost in the affected version ranges that have the Agents plugin enabled and use Zoom chat transcription summarization. Instances without the Agents plugin or without Zoom transcription summarization are not exposed to this flaw.
No product ranges from the sources yet.
11.10.7.0 or later in the 11.10 line, 11.5.8 or later in the 11.5 line, or 11.1.9 or later in the 11.1 lineEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723
This page as .md · .json · in your agent: get_signal("CVE-2026-116516")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.