TOTP Vulnerability in MISP Affects User Authentication Processes

CVE-2026-103655

What is CVE-2026-103655?

MISP has a vulnerability in its two-factor authentication process where a valid one-time TOTP code can be reused within its validity period. This flaw allows an attacker to repurpose captured codes during a legitimate user's session, enabling unauthorized access to user accounts and sensitive threat intelligence data. Users are particularly at risk if they have TOTP enabled and if their codes can be intercepted during the login phase. The vulnerability has been addressed in subsequent versions, specifically post v2.5.48.

References