Unauthorized Access Flaw in OpenCTI Platform

CVE-2025-46732

What is CVE-2025-46732?

The OpenCTI platform, an open-source tool for managing cyber threat intelligence, is affected by an IDOR vulnerability in its GraphQL Notification mutations. This flaw allows authenticated users to modify or delete notifications intended for other users, provided they possess the UUID of the targeted notification. Specifically, the NotificationLineNotificationMarkReadMutation and NotificationLineNotificationDeleteMutation can be exploited, allowing users not only to change the status of notifications but also to access their contents. This security issue emphasizes the need for robust access controls and highlights the importance of upgrading to version 6.6.6, which addresses this vulnerability.

References