Vulnerability in MISP Plugin Settings Exposes Sensitive Credentials

CVE-2026-112192

What is CVE-2026-112192?

MISP has a vulnerability related to the handling of module plugin settings, where sensitive data such as API keys can be exposed to authenticated users. The system fails to respect the 'redacted' and 'cli_only' flags defined in the module's configuration. Consequently, an authenticated user can view these sensitive settings via certain API endpoints, even if they were intended to remain hidden. Additionally, there is a risk that settings meant for command-line access only can be modified through the web API, undermining intended access restrictions.

References