VULNERABILITY INTELLIGENCE

CVE-2026-44730

CVSS score7.2 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-05-26
Last modified2026-07-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

Weakness classification

  • security-advisories@github.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references