CVE-2026-24458 | Mattermost up to 10.11.10/11.2.2/11.3.0 Long Password allocation of resources

A vulnerability described as problematic has been identified in Mattermost up to 10.11.10/11.2.2/11.3.0. This vulnerability affects unknown code of the component Long Password Handler. Executing a manipulation can lead to allocation of resources.

The identification of this vulnerability is CVE-2026-24458. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.