CVE-2026-116516: Insufficient length validation when parsing Zoom chat transcriptions
Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows an authenticated attacker to crash the Agents plugin via summarizing a Zoom chat transcription containing short continuation lines. Mattermost Advisory ID: MMSA-2026-00723
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Mattermostto a version that resolves this vulnerability.Patch MMSA-2026-00723
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs to be authenticated to Mattermost and able to cause the Agents plugin to summarize a Zoom chat transcription containing short continuation lines.
What is the impact of successful exploitation?
Successful exploitation can crash the Mattermost Agents plugin. The provided information indicates an availability impact only; it does not identify confidentiality or integrity impact.
Which versions are affected?
The affected Mattermost versions are listed as <=11.9, 11.1.9, 11.5.8, and 11.10.7.0.