Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Google Drive files to unauthorized private channels and disclose private channel membership.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
「Mattermost, Inc.のGoogle Driveにおける認証の欠如に関する脆弱性（CVE-2026-2299）」をボードに上げるなら1ページでどう書く? 背景/目的/効果の3軸で要約しました。 #セキュリティ #経営報告 ▶ 無料プログラム: https://www.intect-i.jp/local-program/?utm_source=sns&utm_medium=social&utm_campaign=local_program
Post summary
The post references CVE‑2026‑2299 (Mattermost Google Drive authentication flaw) and suggests a board summary, but provides no exploitation, patch, or technical details.
もし自分の現場で「Mattermost, Inc.のGoogle Driveにおける認証の欠如に関する脆弱性（CVE-2026-2299）」が起きたら、最初の一手は何ですか? →背景/目的/効果の3軸でfirst-stepを整理しました。 #セキュリティ #インシデント対応 ▶ 無料トレーニング: https://www.intect-i.jp/training/free/?utm_source=sns&utm_medium=social&utm_campaign=free_training
Post summary
The post poses a question about initial incident response for CVE-2026-2299 and directs readers to a free training resource, but it provides no technical or exploit details.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mattermost | google_drive | - | mattermost | - |
| App | mattermost | google_drive | 1.1.0 | mattermost | - |
| App | mattermost | google_drive | 1.1.0 | mattermost | - |