CVE-2024-26139: high-severity vulnerability in OpenCTI-Platform opencti
OpenCTI Authenticated Privilege Escalation
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
An authenticated user with basic permissions in OpenCTI can exploit a flaw in the profile editing feature to gain admin privileges. This is dangerous because it allows attackers to take full control of the threat intelligence platform.
OpenCTI contains insufficient authorization controls in the profile edit functionality (CWE-284, CWE-657). An authenticated attacker with low-privilege credentials can escalate privileges to administrator level through this vector. Successful exploitation grants complete control over the platform, including threat intelligence data and user management.
In the same product, most dangerous first.