—
GO-2026-6285
Mattermost doesn't require system-level permission when patching protected default system roles in github.com/mattermost/mattermost-server
Quick fix
GO-2026-6285 — github.com/mattermost/mattermost-server: upgrade to the fixed version with the command below.
go get github.com/mattermost/mattermost-server@v10.11.17+incompatibleDetails
Mattermost doesn't require system-level permission when patching protected default system roles in github.com/mattermost/mattermost-server
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/mattermost/mattermost-server
Introduced in:
10.11.0+incompatibleFixed in: 10.11.17+incompatibleFix
go get github.com/mattermost/mattermost-server@v10.11.17+incompatibleGo/github.com/mattermost/mattermost-server/v5
Introduced in:
0No fixed version published yet for github.com/mattermost/mattermost-server/v5 (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/mattermost/mattermost-server/v6
Introduced in:
0No fixed version published yet for github.com/mattermost/mattermost-server/v6 (go modules). Pin to a known-safe version or switch to an alternative.
Go/github.com/mattermost/mattermost/server/v8
Introduced in:
8.0.0-20250731163400-5b955468ea1eFixed in: 8.0.0-20260501142004-99b73d4c4acfFix
go get github.com/mattermost/mattermost/server/v8@v8.0.0-20260501142004-99b73d4c4acfReferences
- https://github.com/advisories/GHSA-m2w9-h2mm-79qr[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-6739[ADVISORY]
- https://github.com/mattermost/mattermost/commit/2c89c2f6768fbe4dfd57a21ca38c0aecead8d4a8[WEB]
- https://github.com/mattermost/mattermost/commit/5e159647b16e571b327ac6882f32eae42971f540[WEB]
- https://github.com/mattermost/mattermost/commit/8000e5933526f4fd66b92131db3a1b1f4520dbae[WEB]
- https://github.com/mattermost/mattermost/commit/f0a390b96e4c730daedbaf5190684776730218c7[WEB]
- https://github.com/mattermost/mattermost/pull/36197[WEB]
- https://github.com/mattermost/mattermost/pull/36377[WEB]
- https://github.com/mattermost/mattermost/pull/36379[WEB]
- https://github.com/mattermost/mattermost/pull/36380[WEB]
- https://github.com/mattermost/mattermost/pull/36382[WEB]
- https://github.com/mattermost/mattermost/releases/tag/v10.11.16[WEB]
- https://github.com/mattermost/mattermost/releases/tag/v11.5.5[WEB]
- https://github.com/mattermost/mattermost/releases/tag/v11.6.2[WEB]
- https://github.com/mattermost/mattermost/releases/tag/v11.7.0[WEB]
- https://mattermost.com/security-updates[WEB]