EUVD-2026-31908
GHSA-q537-qhj4-wcjx
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticate as organization admin
-
DeliveryEnumerate higher-privileged users in other organizations
-
ExploitSend userEdit relationAdd GraphQL mutation
-
ExecutionBypass missing ACL check
-
PersistInherit elevated privileges
-
ImpactAccess sensitive CTI data and control platform
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Access control enforcement
MITRE ATT&CK
1 technique across 1 tactic: Defense Evasion The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires a pre-existing organization-administrator account on an OpenCTI instance running a version below 6.9.7, network reachability to the OpenCTI GraphQL API endpoint, and knowledge of (or ability to enumerate) a target user from another organization who holds higher privileges than the attacker. No user interaction by the victim is required (UI:N) and complexity is low (AC:L). Exploitation is meaningfully limited to deployments that actually delegate organization-admin to multiple parties - single-tenant installations where only trusted staff hold admin roles face minimal practical risk despite the High CVSS score. |
| Impact | The CVSS 3.1 vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H yields 7.2 (High): network-reachable, low complexity, no user interaction, but requires high privileges (an existing organization admin account), with high impact across confidentiality, integrity, and availability. EPSS at 0.04% (11th percentile) and the absence of a public exploit suggest opportunistic mass exploitation is unlikely; this is not in CISA KEV. SSVC-style reasoning would rate exploitation as 'none' (no public PoC), automatable as 'no' (requires an authenticated admin context and target-user knowledge), and technical impact as 'total' (full platform compromise). The realistic risk is concentrated in multi-tenant OpenCTI deployments where untrusted parties hold organization-admin roles - a known operating model for shared CTI communities and MSSP-hosted instances - rather than single-tenant installs. No conflicting signals across sources; CVSS, EUVD, and the GHSA all align on scope and fix version. |
| Exploit ScenarioDerived | A user holding organization-admin rights in a multi-tenant OpenCTI instance identifies a higher-privileged account (for example, a platform administrator or a member of another organization with broad capabilities) and issues a crafted GraphQL userEdit relationAdd mutation to attach that account to their own organization. Because the ACL check on the relationship resolver is missing, the operation succeeds and the attacker inherits or leverages the elevated user's context to read sensitive threat intelligence, modify data, or take over the platform. No public proof-of-concept is currently identified, but the steps are straightforward against any unpatched instance. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jun 08, 2026
Privilege escalation in OpenCTI prior to 6.9.7 allows an organization admin to gain elevated platform-wide privileges by adding a higher-privileged user from a different organization into their own organization, exploiting incorrect ACL enforcement on the userEdit relationAdd GraphQL mutation. The flaw yields full platform access and exposure of sensitive intelligence data; no public exploit identified at time of analysis and EPSS is very low (0.04%, 11th percentile), but the vendor-confirmed GHSA advisory and trivial attack complexity make this a meaningful tenancy-isolation issue for multi-organization deployments.
RemediationAI
Vendor-released patch: upgrade OpenCTI to 6.9.7 or later, and update the pycti client package to 6.9.7 as referenced in GHSA-q537-qhj4-wcjx (https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-q537-qhj4-wcjx). Until the upgrade can be scheduled, restrict the organization-admin role to fully trusted operators only and audit recent userEdit/relationAdd GraphQL operations and organization membership changes for unexpected cross-organization additions of privileged users; the trade-off is operational overhead and loss of self-service org administration. In multi-tenant or community-shared deployments, consider temporarily consolidating user administration under platform administrators rather than per-organization admins until the patch is applied, accepting reduced delegation in exchange for closing the privilege-escalation path.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 2 packages in pypi, euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
OpenCTI is an open source Cyber Threat Intelligence (CTI) platform that exposes a GraphQL API for managing users, organizations, and threat knowledge, with role-based access control intended to enforce separation between tenants. The vulnerability is rooted in CWE-284 (Improper Access Control): the userEdit relationAdd resolver - used to attach a user to an organization via a GraphQL relationship mutation - fails to verify that the calling organization admin has authority over the target user. The affected CPE is cpe:2.3:a:opencti-platform:opencti:*:*:*:*:*:*:*:* across all versions below 6.9.7, including the Python client package pycti tracked separately in PyPA's advisory database (PYSEC-2026-167). Because OpenCTI ingests proprietary IOCs, attribution, and incident data, an ACL gap on a relationship mutation collapses the multi-tenant boundary the platform is designed to enforce.
Know when Opencti gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (GitHub_M) · only source for this CVE.
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
1DescriptionCVE.org
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.
Executive ViewAI
OpenCTI versions prior to 6.9.7 contain a privilege escalation vulnerability in the userEdit GraphQL mutation that allows organization administrators to gain platform-wide access by exploiting incorrect access control enforcement. This creates a significant tenancy-isolation risk for multi-organization deployments with potential exposure of sensitive intelligence data across organizational boundaries. While no public exploit has been identified at time of analysis, the vendor-confirmed vulnerability with trivial attack complexity requires immediate patching.
Vendor-released patch: OpenCTI 6.9.7. Interim controls if patching is delayed: restrict organization admin role assignments to essential personnel, monitor and log all userEdit GraphQL mutations for cross-organization user additions, and disable cross-organization admin user additions until patched.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Unauthenticated attackers can escalate privileges in OpenCTI 6.6.0-6.9.12 by impersonating any user account, including t
Server-Side Template Injection in OpenCTI notifier templates allows privileged administrators with 'Manage customization
OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can
OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can
OpenCTI is an open cyber threat intelligence (CTI) platform. Rated critical severity (CVSS 9.1), this vulnerability is r
Authenticated attackers can delete arbitrary workspaces in OpenCTI versions prior to 6.8.1 due to missing ownership chec
OpenCTI is an open-source cyber threat intelligence platform. Rated high severity (CVSS 8.1), this vulnerability is remo
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observ
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. Rated high
Authorization bypass in OpenCTI prior to version 7.260326.0 lets any authenticated user holding the KNOWLEDGE_KNUPDATE p
Elasticsearch Painless script injection via OpenCTI's GraphQL API allows any authenticated user holding the KNOWLEDGE ca
OpenCTI versions prior to 6.9.1 contain an authorization bypass vulnerability in the GraphQL mutation 'IndividualDeletio
Exploit-DB