CVE-2026-56447

Name of the Vulnerable Software and Affected Versions MISP (affected versions not specified)

Description An authenticated site administrator can set the Kafka rdkafka config setting to an arbitrary filesystem path. The system parses the referenced INI file and passes its options to rdkafka. By using a crafted configuration file hosted in a MISP-writable location, such as an uploaded file or administrative image, an attacker can use rdkafka options like plugin.library.paths to load an external library, leading to arbitrary code execution with the privileges of the MISP process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.