EUVD-2026-31908
GHSA-q537-qhj4-wcjx
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (GitHub_M) · only source for this CVE.
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
3DescriptionCVE.org
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.
AnalysisAI
Privilege escalation in OpenCTI prior to 6.9.7 allows an organization admin to gain elevated platform-wide privileges by adding a higher-privileged user from a different organization into their own organization, exploiting incorrect ACL enforcement on the userEdit relationAdd GraphQL mutation. The flaw yields full platform access and exposure of sensitive intelligence data; no public exploit identified at time of analysis and EPSS is very low (0.04%, 11th percentile), but the vendor-confirmed GHSA advisory and trivial attack complexity make this a meaningful tenancy-isolation issue for multi-organization deployments.
Technical ContextAI
OpenCTI is an open source Cyber Threat Intelligence (CTI) platform that exposes a GraphQL API for managing users, organizations, and threat knowledge, with role-based access control intended to enforce separation between tenants. The vulnerability is rooted in CWE-284 (Improper Access Control): the userEdit relationAdd resolver - used to attach a user to an organization via a GraphQL relationship mutation - fails to verify that the calling organization admin has authority over the target user. The affected CPE is cpe:2.3:a:opencti-platform:opencti:*:*:*:*:*:*:*:* across all versions below 6.9.7, including the Python client package pycti tracked separately in PyPA's advisory database (PYSEC-2026-167). Because OpenCTI ingests proprietary IOCs, attribution, and incident data, an ACL gap on a relationship mutation collapses the multi-tenant boundary the platform is designed to enforce.
RemediationAI
Vendor-released patch: upgrade OpenCTI to 6.9.7 or later, and update the pycti client package to 6.9.7 as referenced in GHSA-q537-qhj4-wcjx (https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-q537-qhj4-wcjx). Until the upgrade can be scheduled, restrict the organization-admin role to fully trusted operators only and audit recent userEdit/relationAdd GraphQL operations and organization membership changes for unexpected cross-organization additions of privileged users; the trade-off is operational overhead and loss of self-service org administration. In multi-tenant or community-shared deployments, consider temporarily consolidating user administration under platform administrators rather than per-organization admins until the patch is applied, accepting reduced delegation in exchange for closing the privilege-escalation path.
OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can
Unauthenticated attackers can escalate privileges in OpenCTI 6.6.0-6.9.12 by impersonating any user account, including t
OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can
OpenCTI is an open cyber threat intelligence (CTI) platform. Rated critical severity (CVSS 9.1), this vulnerability is r
Server-Side Template Injection in OpenCTI notifier templates allows privileged administrators with 'Manage customization
OpenCTI is an open-source cyber threat intelligence platform. Rated high severity (CVSS 8.1), this vulnerability is remo
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observ
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. Rated high
Authorization bypass in OpenCTI prior to version 7.260326.0 lets any authenticated user holding the KNOWLEDGE_KNUPDATE p
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.
Elasticsearch Painless script injection via OpenCTI's GraphQL API allows any authenticated user holding the KNOWLEDGE ca
OpenCTI versions prior to 6.9.1 contain an authorization bypass vulnerability in the GraphQL mutation 'IndividualDeletio
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today