Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.
Credits
Thanks to Rohitesh Gupta for contributing to this improvement under the Mattermost responsible disclosure policy.
