What’s Vulnerable › Vulnerabilities

CVE-2024-26139: OpenCTI Authenticated Privilege Escalation

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-23 · updated 2026-06-17
• Weakness: CWE-284

Description

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application.

Affected products

• OpenCTI-Platform opencti: through 5.12.31

References

• https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9
• https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9

Get alerted when CVE-2024-26139 or the next vulnerability affects your stack