Authentication Bypass Vulnerability in MISP by The MISP Project

CVE-2026-85216

What is CVE-2026-85216?

The MISP platform contains a vulnerability in its LDAP and LinOTP authentication mechanisms, stemming from insufficient validation of user-provided credentials. Specifically, custom authentication implementations did not adequately check input, allowing empty or invalid values to bypass standard security checks. An attacker knowledgeable about a valid user's email could exploit this flaw by submitting an empty password, potentially being authenticated without proper verification. Additionally, an attacker could create accounts with empty passwords, gaining inappropriate access to sensitive information and privileges. A recent patch has addressed these issues by enforcing valid credential checks and securing account creation processes.

References