Validation Flaw in MISP Synchronization Logic by MISP

CVE-2026-107278

What is CVE-2026-107278?

MISP has a critical validation flaw in its object synchronization logic where objects created without a description are rejected during replication, leading to silent data loss. This occurs when authorized users create such objects, which are then synced to peer instances, resulting in the loss of valid objects and their associated attributes. Proper synchronization relies on ensuring that all object fields, including descriptions, are filled to maintain data integrity across MISP instances. Users need to be aware of this issue to prevent unintended data loss and ensure effective threat intelligence sharing.

References