CVE-2026-73155 | MISP cti-transmute up to 1.4.0 Reaction comments_repo.toggle_reaction comment_id improper authorization

A vulnerability labeled as critical has been found in MISP cti-transmute up to 1.4.0. The affected element is the function comments_repo.toggle_reaction of the component Reaction Handler. The manipulation of the argument comment_id results in improper authorization.

This vulnerability is known as CVE-2026-73155. It is possible to launch the attack remotely. No exploit is available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More