CVE-2026-8823 | Mattermost up to 10.11.17/11.7.0/11.7.x Standard demote-user API authorization

June 22, 2026 Yanac

A vulnerability was found in Mattermost up to 10.11.17/11.7.0/11.7.x. It has been classified as problematic. This vulnerability affects unknown code of the component Standard demote-user API. This manipulation causes incorrect authorization.

This vulnerability is tracked as CVE-2026-8823. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More