CyberRota Analysis
AI-GeneratedThe conversion-history details endpoint in affected versions of MISP cti-transmute has an incomplete authorization check, allowing unauthorized users to access history records of deleted conversions. This vulnerability could lead to the disclosure of sensitive history input/output data. Organizations using MISP cti-transmute should prioritize patching this issue to prevent potential data leaks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check. When a history record references a deleted conversion, the associated conversion lookup returns None. The previous logic only denied access when the conversion object existed and the visibility check failed. As a result, deleted conversions bypassed the authorization check and their retained history input/output could be disclosed to a user able to request the corresponding history entry. The July 22, 2026 commit changes the logic to deny access whenever the conversion is missing or the requester lacks permission