OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 26, 2026 · NIST NVD

   Detected

   OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

2. Jul 24, 2026 · NIST NVD

   Updated

   OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL on userEdit relationAdd. This vulnerability is fixed in 6.9.7.

Affected

• cpe citeum/openctiversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-44730

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-44730

  OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due t

  nvd.nist.gov

References

• Vendor Advisory · github.com