CVE-2026-10600
Received Received - Intake

Denial of Service in Mattermost via Document Extraction

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: Mattermost, Inc.

Description
Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, 10.11.x <= 10.11.20 fail to bound the time and resource consumption of server-side document content extraction which allows an authenticated user with file-upload permission to degrade file uploads for all users on the server via repeatedly uploading small documents that are cheap to upload but expensive to extract, saturating the shared extraction worker pool.. Mattermost Advisory ID: MMSA-2026-00694

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-27
Generated
2026-07-27
AI Q&A
2026-07-27
EPSS Evaluated
N/A
NVD
CVE-2026-10600
EUVD
EUVD-2026-49253

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
mattermost mattermost to 11.8.0 (inc)
mattermost mattermost to 11.7.3 (inc)
mattermost mattermost to 11.6.5 (inc)
mattermost mattermost to 10.11.20 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Mattermost versions 11.8.x <= 11.8.0, 11.7.x <= 11.7.3, 11.6.x <= 11.6.5, and 10.11.x <= 10.11.20. It allows an authenticated user with file-upload permission to degrade file uploads for all users by repeatedly uploading small documents that are cheap to upload but expensive to extract. This saturates the shared extraction worker pool, impacting server performance.

Detection Guidance

Check Mattermost server logs for repeated file upload attempts that trigger high resource usage. Monitor extraction worker pool saturation or delays in file processing. Look for unusual patterns in upload frequency or document sizes from authenticated users.

Impact Analysis

If exploited, this vulnerability can cause file uploads to slow down or fail for all users on the server. It may lead to degraded system performance and potential denial of service for file-related operations.

Compliance Impact

The vulnerability could indirectly impact compliance with GDPR or HIPAA by degrading system performance, potentially leading to denial-of-service conditions that disrupt access to sensitive data. However, the CVE does not explicitly link this issue to compliance violations or data breaches.

Mitigation Strategies

Upgrade Mattermost to a patched version (11.8.1 or later, 11.7.4 or later, 11.6.6 or later, or 10.11.21 or later). Limit file upload permissions to trusted users. Implement rate limiting on file uploads to prevent abuse.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-10600. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart