Authorization Bypass Vulnerability in MISP by the MISP Project

CVE-2026-103659

What is CVE-2026-103659?

The MISP application features an authorization bypass flaw with its event flattening capability, leading to unauthorized access to sensitive threat intelligence data. When users request an event with the flatten option, it removes object containment from the query, resulting in attributes from organization-restricted objects being disclosed to users without proper permissions. Moreover, a secondary issue limits event owners' ability to access attributes of their deleted objects upon requesting flattened attributes. This vulnerability can lead to inadvertent exposure of sensitive data across organizational boundaries.

References