CVE-2026-44730: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their…

PriorityP344high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

0.32%

23.3th percentile

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
citeum	opencti	< 6.9.7	6.9.7
opencti-platform	opencti	< 6.9.7	6.9.7

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.