Privilege Escalation Vulnerability in MISP by ThreatConnect

CVE-2026-103239

What is CVE-2026-103239?

MISP presents a significant vulnerability that allows users with tag editor permissions to exploit the tag collection creation and editing functionalities. Malicious actors can craft requests containing extra associated model data, such as User or Organisation records. This vulnerability permits unauthorized modification or creation of privileged accounts and can lead to privilege escalation to site administrator levels. Users must ensure they are running a version above 2.5.48 to mitigate this risk.

References