Improper Input Handling in cti-transmute by MISP

CVE-2026-73161

What is CVE-2026-73161?

A flaw in the cti-transmute tool allows for improper handling of conversion-table values during the search highlighting process. The highlight() function exposes a vulnerability by directly returning unescaped text when no query is supplied or by inadequately inserting tags through regex replacements. In scenarios where malicious content is introduced into conversion data, this can lead to the interpretation of harmful markup as HTML, rather than displaying it as plain text. The issue is mitigated by a fix that employs a highlightMatches() function to escape special characters before applying the highlighting, effectively preventing cross-site scripting attempts.

References