PT-2026-25902 · Opencti Platform · Opencti

Published 2026-03-17 · Updated 2026-03-17 · CVE-2026-21886

NVD

CVSS v3.1

6.5

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletionDeleteMutation" is intended to allow users to delete individual entity objects respectively. However, it was observed that this mutation can be misused to delete unrelated and sensitive objects such as analyses reports etc. This behavior stems from the lack of validation in the API to ensure that the targeted object is contextually related to the mutation being executed. Version 6.9.1 fixes the issue.

Fix

Improper Authorization

Weakness Enumeration

CWE-566

CWE-285

CWE-915

Related Identifiers

CVE-2026-21886

Affected Products

Opencti

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-21886 · Security Note
• https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-mhmx-j75v-2m6x · Note