Which versions of MISP are affected by CVE-2026-56447?

MISP threat intelligence platform is vulnerable to arbitrary code execution through compromised or malicious administrator accounts that manipulate Kafka configuration settings.. A patch is available.

How to fix or mitigate CVE-2026-56447?

Within 24 hours: Identify all MISP deployments and confirm current versions against vendor advisory. Within 7 days: Apply vendor security patch to all instances and validate normal operations. Within 30 days: Review administrator access logs and privileges for the past 90 days to identify any suspicious configuration changes.

MISP CVE-2026-56447

Q: What is the CVSS score of CVE-2026-56447?

CVE-2026-56447 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-38231 CRITICAL

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-06-22 CIRCL

GHSA-834x-pvxg-xh58

RCE Misp

9.3

CVSS 4.0 · Vendor: CIRCL

Severity by source

Vendor (CIRCL) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

9.1 CRITICAL

Network-reachable admin UI (AV:N/AC:L), requires site_admin (PR:H), no user interaction, code execution as MISP user breaks out of the application sandbox to the OS (S:C) with full CIA impact.

3.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (CIRCL).

CVSS VectorVendor: CIRCL

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Lifecycle Timeline

Source Code Evidence Fetched

Jun 22, 2026 - 14:02 vuln.today

Analysis Generated

Jun 22, 2026 - 14:02 vuln.today

DescriptionCVE.org

MISP allowed an authenticated site administrator to set the Kafka_rdkafka_config setting to an arbitrary filesystem path. MISP subsequently parsed the referenced INI file and passed its options to rdkafka. A crafted attacker-controlled configuration file could use rdkafka options such as plugin.library.paths to load an external library, resulting in arbitrary code execution with the privileges of the MISP process. An attacker could leverage a MISP-writable location, such as an uploaded file or administrative image, to host the malicious configuration file.

The issue is fixed by restricting the setting to absolute .ini files located only in approved configuration directories outside the webroot and MISP upload targets.

AnalysisAI

Authenticated arbitrary code execution in MISP allows a site administrator to abuse the Kafka_rdkafka_config setting to load an attacker-controlled INI file, which is parsed and passed to rdkafka with options such as plugin.library.paths to load an arbitrary shared library. The flaw (CWE-829, inclusion of functionality from untrusted control sphere) yields code execution as the MISP process user; no public exploit identified at time of analysis, but a vendor patch is available.

Technical ContextAI

MISP is an open-source Threat Intelligence Platform written in PHP (CakePHP). The vulnerable code path is in app/Model/Server.php, where the Kafka_rdkafka_config server setting accepted any filesystem path. MISP then read that INI file and passed every key/value pair to the librdkafka client via rdkafka. librdkafka exposes powerful tunables - most notably plugin.library.paths, which causes the library loader to dlopen() arbitrary shared objects whose constructors execute attacker code in-process. Combined with MISP's own writable locations (uploaded attachments, organisation logos under the webroot, tmp directories), an admin can stage both the malicious .so payload and the INI pointer file entirely through the application. The fix mirrors the new testLogPath() validator shown in the commit: the path must be absolute, free of stream wrappers and NUL/CRLF, resolved via realpath(), and confined to an allow-list of approved configuration directories outside the webroot and upload targets, with a strict filename grammar rejecting executable extensions.

RemediationAI

Upstream fix is available as commit 9600d486ccfc98388e13897fd954350cebac5fb0 (https://github.com/MISP/MISP/commit/9600d486ccfc98388e13897fd954350cebac5fb0); upgrade to the first MISP release that incorporates this commit and verify that Server::testKafkaRdkafkaConfig (or the equivalent path validator) restricts the setting to absolute .ini files in approved configuration directories. As compensating controls until upgrade: unset or blank the Kafka_rdkafka_config value if Kafka publishing is not used (this disables Kafka enrichment output, which is acceptable for most deployments); audit and rotate site_admin credentials, enforce MFA on admin accounts, and restrict /servers/serverSettings* to trusted source IPs via web-server ACLs (side effect: legitimate remote admin from other networks breaks); run MISP under a dedicated low-privilege user with no shell and mount the webroot and Attachments/img/orgs directories noexec (side effect: any feature that depends on executing uploads - there should be none - will fail); and monitor file changes under app/files/, app/webroot/img/orgs/ and the tmp upload paths for *.so/*.ini drops.