CVE-2026-54360— MISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups

MISP sharing group creation mass assignment allows unauthorized takeover of existing sharing groups

A mass assignment vulnerability exists in MISP’s sharing group creation endpoint. When creating a new sharing group, the controller did not remove a user-supplied id field before saving the submitted data. In CakePHP, supplying a primary key in the save data can cause a create() followed by save() operation to update an existing record instead of creating a new one. An authenticated user with permission to add sharing groups could therefore submit the identifier of an existing sharing group and modify that sharing group without passing the normal edit access-control checks. This may allow the attacker to take over or alter sharing groups they do not otherwise have access to, potentially affecting the confidentiality and integrity of information shared through those groups. Affected component: app/Controller/SharingGroupsController.php, add() action

N/A

通过用户控制密钥绕过授权机制

MISP 授权问题漏洞

MISP是MISP组织开源的一套开源的软件解决方案。 该产品用于收集、存储、分发、共享网络安全指标,并具有威胁网络安全事件分析和恶意软件分析等功能。 MISP 2.5.40之前版本存在授权问题漏洞，该漏洞源于共享组创建端点存在批量赋值漏洞，控制器在保存提交数据前未移除用户提供的id字段，导致经过身份验证且具有添加共享组权限的用户可提交现有共享组的标识符并修改该共享组，从而可能接管或更改其原本无权访问的共享组，影响共享信息的机密性和完整性。

N/A

N/A