CVE-2026-72759 cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion

In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversion, the associated conversion lookup returns None. The previous logic only denied access when the conversion object...

EUVD-2026-55635

In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversion, the associated conversion lookup returns None. The previous logic only denied access when the conversion object...

CVE-2026-72759

CVE-2026-72759 affects MISP cti-transmute. The vulnerability lies in the conversion-history details endpoint, where an incomplete authorization check allows disclosure when a history entry references a deleted conversion. If the conversion lookup returns None, access was not properly denied; as a...