High
Terminal Escape Injection in mmctl Report Posts Command
Type: advisorySources: OSV
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking.. Mattermost Advisory ID: MMSA-2026-00599
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-3108
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 03:49 UTC · Revision 1
Source evidence
Terminal Escape Injection in mmctl Report Posts Command
core-osv · Original sourcePublished 26 Mar 2026, 16:16 UTC
Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking.. Mattermost Advisory ID: MMSA-2026-00599
osv:CVE-2026-3108
Complete source record
{
"id": "4c0412091ae8310a669ca653cb27dbb449a78fe2a69f9fe13ee4858cc78a07e7",
"url": "https://osv.dev/vulnerability/CVE-2026-3108",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Terminal Escape Injection in mmctl Report Posts Command",
"summary": "Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands terminal output which allows attackers to manipulate administrator terminals via crafted messages containing ANSI and OSC escape sequences that enable screen manipulation, fake prompts, and clipboard hijacking.. Mattermost Advisory ID: MMSA-2026-00599",
"evidence": "osv:CVE-2026-3108",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2026-3108",
"aliases": [
"CVE-2026-3108",
"GHSA-3439-vqgj-2gcf",
"GO-2026-5067"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/mattermost/mattermost",
"type": "GIT",
"events": [
{
"introduced": "5b955468ea1ea8b56c0fb10feb258a36a767d7bb"
},
{
"fixed": "fddd4a70bcb32eaff394a2fa5399efcd1b2ae251"
},
{
"introduced": "ab7b138824c61fe1fe815243d7e2a914dec49c8b"
},
{
"fixed": "005521aa79666e6960bc3302f6172b810f6bff3a"
},
{
"introduced": "d27a2195068ddfa3ce17cf470f9739e4edb94b83"
},
{
"fixed": "b7d4a1f1f59b645a7598181d33cfc537ea9a6c9c"
},
{
"introduced": "2a1ac98bd3fae587927adf9340ba266c8c02018e"
},
{
"last_affected": "2a1ac98bd3fae587927adf9340ba266c8c02018e"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "10.11.0"
},
{
"fixed": "10.11.11"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11.2.0"
},
{
"fixed": "11.2.3"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11.3.0"
},
{
"fixed": "11.3.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:mattermost:mattermost_server:11.4.0:*:*:*:*:*:*:*",
"range": [
{
"introduced": "11.4.0"
},
{
"last_affected": "11.4.0"
}
],
"source": "CPE_STRING"
}
]
}
}
],
"versions": [
"11.4.0",
"v11.3.1",
"v11.4.0-rc3",
"v11.4.0",
"mattermost-redux@11.4.0",
"@mattermost/types@11.4.0",
"@mattermost/client@11.4.0",
"v10.11.11-rc1",
"v11.3.1-rc1",
"v10.11.10",
"v11.2.2",
"v11.3.0-rc4",
"v11.3.0-rc3",
"v11.3.0",
"mattermost-redux@11.3.0",
"@mattermost/types@11.3.0",
"@mattermost/client@11.3.0",
"v10.11.9",
"v11.2.1",
"v11.2.1-rc1",
"v11.2.0",
"v10.11.9-rc1",
"v10.11.8",
"v10.11.7",
"v10.11.6",
"v10.11.5",
"v10.11.4-rc3",
"v10.11.4",
"v10.11.4-rc2",
"v10.11.4-rc1",
"v10.11.3",
"v10.11.2-rc2",
"v10.11.2",
"v10.11.2-rc1",
"v10.11.1",
"v10.11.1-rc1",
"v10.11.0-rc3",
"v10.11.0",
"mattermost-redux@10.11.0",
"@mattermost/types@10.11.0",
"@mattermost/client@10.11.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-3108.json"
}
}
],
"modified": "2026-10-28T02:30:32.827943993Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3108.json",
"https://mattermost.com/security-updates",
"https://nvd.nist.gov/vuln/detail/CVE-2026-3108"
],
"provider_metadata": {
"cwe_ids": [
"CWE-150"
],
"cna_assigner": "Mattermost",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "11.4.0"
},
{
"last_affected": "11.4.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
}
]
},
{
"extracted_events": [
{
"range": [
{
"introduced": "11.2.0"
},
{
"last_affected": "11.2.2"
},
{
"introduced": "10.11.0"
},
{
"last_affected": "10.11.10"
},
{
"introduced": "11.3.0"
},
{
"last_affected": "11.3.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/3xxx/CVE-2026-3108.json"
}
},
"related_cves": [
{
"value": "CVE-2026-3108",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 500107,
"published_at": "2026-03-26T16:16:49.79+00:00"
}