CVE-2026-63482

The Yeti Forensics Intelligence platform is vulnerable to unauthenticated access to full audit timelines in versions prior to 2.5.1 . The root cause is that the audit router is registered without the required auth.get_current_active_user dependency, and core/web/apiv2/audit.py fails to perform a ...

CVE-2026-63482 Yeti: Unauthenticated Access to Full Audit Timeline Discloses All Threat Intelligence Data

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Dependsauth.getcurrentactiveuser, and core/web/apiv2/audit.py does not perform a route-level authentication check for...