OpenCTI Vulnerability Allows Bypassing Security Measures

CERT-Bund has released a security advisory (WID-SEC-2026-0746) detailing a vulnerability in OpenCTI, an open-source platform used for managing cyber threat intelligence. The vulnerability, with a CVSS Base Score of 6.5, allows remote, authenticated attackers to bypass security measures. This affects versions of OpenCTI prior to 6.9.1, running on Linux and UNIX operating systems.

Organizations utilizing OpenCTI should update to version 6.9.1 or later to mitigate this risk. Failure to update could expose systems to unauthorized access and compromise of sensitive threat intelligence data. While no specific compliance deadline is mentioned, prompt patching is strongly advised to prevent exploitation.