CVE-2026-14298 affects multiple versions of Mattermost, where the application does not adequately restrict resource consumption during processing of specific user inputs. This can be exploited by an authenticated user to trigger a denial of service by exhausting system resources. The vulnerability has a CVSS v3.1 score of 6.5 (medium severity), with an attack vector of network, low attack complexity, requiring privileges, no user interaction, and impacts availability only. No known exploits are reported in the wild. No patch or remediation information is provided in the available data.

An authenticated user can cause a denial of service by exploiting the improper resource consumption limitation, potentially disrupting availability of the Mattermost service. There is no impact on confidentiality or integrity reported.

Patch status is not yet confirmed — check the vendor advisory (Mattermost Advisory ID: MMSA-2026-00713) for current remediation guidance. Until a fix is available, consider limiting authenticated user capabilities or monitoring resource usage patterns related to user input processing to mitigate potential DoS attempts.