CVE-2026-78380

Name of the Vulnerable Software and Affected Versions RansomLook (affected versions not specified)

Description RansomLook fails to enforce the privacy status of ransomware groups and markets when distributing newly collected victim posts to external notification channels. The post-processing logic verifies if an individual post is private but fails to check the privacy configuration of the associated group or market. This allows victim information from private entities to be automatically published via Rocket.Chat, Mastodon, Bluesky, and e-mail notification channels. Additionally, the public MISP feed (Malware Information Sharing Platform) incorrectly determined privacy using the groupinfo() function, which only queries the group database and ignores market privacy flags. Unauthorized parties accessing these channels or the feed may obtain sensitive data, including victim names and incident information from privately monitored entities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.