Import Vulnerability in MISP STIX Parser by MISP

CVE-2026-77710

What is CVE-2026-77710?

A vulnerability exists in the MISP STIX parser whereby a crafted STIX document can manipulate security-sensitive metadata during its import. The parser switches between internal and external parsing mechanisms based on metadata present in the STIX document, which can be controlled by the document creator. An attacker can exploit this by injecting unwanted attributes or modifying existing ones, thereby altering key properties like distribution, sharing restrictions, and classification. This manipulation may facilitate unauthorized sharing of sensitive information, conflicting with the importing organization's policies. The issue stems from the lack of control over externally supplied object properties, leading to potential security breaches.

References