Authorization Flaw in MISP Allows Unauthorized Sharing Group Access by Authenticated Users

CVE-2026-85533

What is CVE-2026-85533?

An authorization flaw in MISP permitted authenticated users to exploit the sharing_group_id without confirming their authorization for the referenced Sharing Group. The flaw primarily affected workflows involving attribute and Galaxy Cluster creation and editing, where validation of the sharing group only occurred under specific conditions. Attackers could bypass intended data-sharing boundaries, thus leading to unauthorized data association with Sharing Groups, triggering potential data leaks and unauthorized distributions. The recent fix ensures robust authorization checks on all sharing_group_id submissions, fortifying data protection measures.

References