PT-2026-1834 · Opencti · Opencti

Published 2026-01-07 · Updated 2026-01-20 · CVE-2025-61782

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenCTI versions prior to 6.8.3

Description OpenCTI is a platform for managing cyber threat intelligence knowledge. A flaw exists in the SAML authentication endpoint /auth/saml/callback that allows for open redirection. Manipulating the RelayState parameter can force a redirect to an external URL, potentially leading to phishing or credential theft.

Recommendations Update to version 6.8.3 or later.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-61782

GHSA-JC3F-C62G-V7QW

Affected Products

Opencti

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61782.json · Exploit
• https://github.com/OpenCTI-Platform/opencti/commit/f755165a26888925c4a58018f7238ff92a0bd378 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-61782 · Security Note
• https://osv.dev/vulnerability/CVE-2025-61782 · Vendor Advisory
• https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-jc3f-c62g-v7qw · Note
• https://github.com/OpenCTI-Platform/opencti/releases/tag/6.8.3 · Note
• https://t.me/cveNotify/149322 · Telegram Post
• https://twitter.com/CVEnew/status/2008959504483012825 · Twitter Post