Improper Authorization in MISP Affects Data Access
CVE-2026-86342

5.3MEDIUM

Key Information:

Vendor

Misp

Status
Misp
Vendor
CVE Published:
7 September 2026

What is CVE-2026-86342?

MISP contains a vulnerability where improper authorization checks in the freetext feed preview functionality enable unauthorized access to restricted event data. Users can inadvertently gain access to event correlations and associated metadata that they should not be able to view, based solely on attribute values and deletion status. The vulnerability also permits the return of cross-feed correlation data, leaking metadata from feeds that are not visible to the querying users. Recent patches have addressed these issues by applying user access control lists (ACLs) to attribute correlation searches, restricting cross-feed results based on visibility, and removing unnecessary feed URL information from correlation outputs.

Affected Version(s)

MISP 0 <= 2.5.45

References

https://github.com/MISP/MISP/commit/dedb4b297
patch
https://github.com/MISP/MISP/commit/4b6916086
patch
https://github.com/MISP/MISP/commit/dc1a0f7c2
patch

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Scottish Government - National Cyber Team
iglocska
Claude Opus 5 (1M context)
.