CVE-2026-41259 | BDVDB-2026-328677 Detail
mastodonmastodon
Description#
Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted differently by some mailing servers. This vulnerability is fixed in v4.5.9, v4.4.16, and v4.3.22.
Impact#
Per CVSS v4.0: confidentiality impact none, integrity impact high, availability impact none. Attack vector: network.
Weaknesses#
- CWE-841 Improper Enforcement of Behavioral Workflow
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.