Executive brief
OpenCTI, a platform for managing cyber threat intelligence, contains a vulnerability in its data ingestion feature. An attacker with basic user permissions can force the platform to send requests to internal systems that are not normally accessible from the internet. This could allow an attacker to steal sensitive configuration data from cloud metadata services or interact with internal databases like Redis and Elasticsearch, potentially leading to a broader compromise of the organization's infrastructure.
Technical details
A semi-blind Server-Side Request Forgery (SSRF) exists in OpenCTI's data ingestion component. The vulnerability stems from improper input validation of user-supplied URLs and the use of the Axios HTTP client with its default 'allowAbsoluteUrls: true' configuration. A remote attacker with low privileges can provide a crafted absolute URL to force the server to initiate requests to arbitrary internal or external endpoints. This can be used to target internal services (e.g., Redis, Elasticsearch, RabbitMQ) or cloud metadata services (AWS/Azure/GCP) to exfiltrate credentials or configuration details. The issue is addressed in version 6.8.16.
Affected products
- Filigran OpenCTI < 6.8.16
- Filigran pycti < 6.8.16
Timeline
- 2026-03-12: disclosed: NVD publication date
- 2026-06-22: advisory: GitHub Advisory published