CVE-2026-72759— cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-72759
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion
Source: CVE Program / CVE List V5
Vulnerability Description
In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversion, the associated conversion lookup returns None. The previous logic only denied access when the conversion object existed and the visibility check failed. As a result, deleted conversions bypassed the authorization check and their retained history input/output could be disclosed to a user able to request the corresponding history entry. The July 22, 2026 commit changes the logic to deny access whenever the conversion is missing or the requester lacks permission
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| misp | cti-transmute | 0 ~ 1.4.0 | - |
II. Public POCs for CVE-2026-72759
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-72759
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-72759 (1)
Same Patch Batch · misp · 2026-08-10 · 3 CVEs total
| CVE-2026-72760 | 5.3 MEDIUM | cti-transmute Following List Exposes User Email Addresses to Authenticated Users |
| CVE-2026-72751 | 5.1 MEDIUM | Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Cont |
IV. Related Vulnerabilities
Same product: cti-transmute
- CVE-2026-72760
cti-transmute Following List Exposes User Email Addresses to - CVE-2026-72751
Stored Cross-Site Scripting in CTI-Transmute Conversion Grap - CVE-2026-71502
Unauthenticated Stored Vue Template Injection Leads to Cross - CVE-2026-69082
Cross-Site Request Forgery in the Administrative User Deleti - CVE-2026-69079
Unauthenticated Denial of Service via Unbounded Activity-Tim
Same vendor: misp
- CVE-2026-72760
cti-transmute Following List Exposes User Email Addresses to - CVE-2026-72751
Stored Cross-Site Scripting in CTI-Transmute Conversion Grap - CVE-2026-71502
Unauthenticated Stored Vue Template Injection Leads to Cross - CVE-2026-69082
Cross-Site Request Forgery in the Administrative User Deleti - CVE-2026-69079
Unauthenticated Denial of Service via Unbounded Activity-Tim
Same weakness: CWE-862
- CVE-2026-72866
WebSocket Terminal Auth Bypass - CVE-2026-72864
Dokploy Broken Access Control on docker-container-terminal W - CVE-2026-71962
Flowise 2.2.4 - 3.1.4 Missing Authorization via openai-assis - CVE-2026-72900
Metabase information exposure - CVE-2026-72732
Discourse: Templates endpoint exposes hidden tag names
V. Comments for CVE-2026-72759
No comments yet