Cross-Site Request Forgery Vulnerability in MISP by MISP Project

CVE-2026-85547

What is CVE-2026-85547?

A cross-site request forgery (CSRF) vulnerability exists in MISP that compromises form-security protections. This flaw is due to MISP's method for identifying REST requests based on certain request properties, such as URL suffixes or the HTTP Accept header. An attacker can manipulate this behavior by embedding malicious code in a page, exploiting the victim's authenticated session to perform unauthorized actions on MISP through crafted requests. The vulnerability allows attackers to bypass CSRF protections altogether, potentially leading to unauthorized modifications or deletions of critical data. Recent patches improved this security flaw by ensuring that CSRF exemptions are only applied when requests include a valid MISP API key, thereby enhancing the platform's overall security.

References