CVE-2024-21848: Mattermost Server

Low severity, CVSS 3.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper Access Control in Mattermost Server versions 8.1.x before 8.1.11 allows an attacker that is in a channel with an active call to keep participating in the call even if they are removed from the channel

Affected products

• Mattermost Mattermost Server: from 8.1.0, before 8.1.11 (fixed in 8.1.11)

Published 2024-04-05. Last modified 2026-06-17.