CVE-2026-26233 | Mattermost up to 10.11.11/11.2.3/11.3.1/11.4.0/11.4.x HTTP/2 resource consumption

A vulnerability described as problematic has been identified in Mattermost up to 10.11.11/11.2.3/11.3.1/11.4.0/11.4.x. This affects an unknown function of the component HTTP2 Handler. Such manipulation leads to resource consumption.

This vulnerability is uniquely identified as CVE-2026-26233. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.