Auth bypass in Misp Cti-transmute

CVE-2026-73140

Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports. Although normal comment retrieval filters comments according to conversion visibility, comment privacy, ownershi…

Vulnerability class: Broken Access Control

Affected products

Weakness classification (CWE)

References