CVE-2026-90955

MISP versions ≤ 2.5.45 contain a defect in the interactive CLI shell's audit logging. The legacy SysLogLogable behavior stored the impersonated user identity in behavior-instance state, which could be overwritten when another model lazily attached the shared behavior . As a result, subsequent CLI...