OpenCTI Privilege Escalation Vulnerability for Organization Admins

A privilege escalation vulnerability has been identified in OpenCTI versions prior to 6.9.7. This issue allows organization admins to increase their privileges by adding users from other organizations who have higher privileges. The vulnerability arises from incorrect access control lists (ACLs) on the userEdit relationAdd, enabling unauthorized privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, granting full platform access and the ability to access sensitive or proprietary information.

Remediation

Users can upgrade to OpenCTI version 6.9.7 or later to address this vulnerability.