External Tools Management Vulnerability in MISP Modules by MISP

CVE-2026-127016

What is CVE-2026-127016?

The MISP Modules application contains a vulnerability in its external tools management component. This issue stems from a failure to enforce authorization checks for critical administrative functions, allowing unauthenticated users to manipulate external tools. An attacker can add, delete, or modify tools—including their configurations and sensitive information like API keys—if the environment variable ADMIN_PASSWORD is not set, which leads to insecure management access. This configuration flaw represents a critical oversight in access controls, making it imperative for users to ensure ADMIN_PASSWORD protection to prevent unauthorized exploitation.

References