Logic Error in Event Synchronization of MISP by MISP Project

CVE-2026-112179

What is CVE-2026-112179?

A logic error within the event synchronization process of MISP arises during the preparation of event reports for remote push. Specifically, the filtering of non-exportable tags was only applied once after all reports had been processed, rather than for each individual report. Consequently, this flaw allows all but the last report in a batch to be sent to the remote MISP instance with its non-exportable tags intact, risking the exposure of sensitive tag information. Furthermore, if the last report in the batch is empty, a null report is generated instead, which can lead to failures in saving events on the remote instance. This vulnerability impacts MISP setups designed to synchronize multiple reports.

References