MISP Event Save Workflow Vulnerability in MISP by Team MISP

CVE-2026-107175

What is CVE-2026-107175?

A vulnerability in MISP's event save workflow allows for improper handling of event modifications. When a user with write access alters the distribution level or sharing group identifier of an event, the system erroneously stores the new data, bypassing a necessary recalibration of correlations. This leads to two primary issues: stale event data may continue to be visible to users in inappropriate sharing groups, risking inadvertent information exposure, while valuable new correlations may fail to be recognized when event distributions broaden, thereby compromising effective threat intelligence sharing.

References