OpenCTI Authenticated Privilege Escalation

An authenticated user with basic permissions in OpenCTI can exploit a flaw in the profile editing feature to gain admin privileges. This is dangerous because it allows attackers to take full control of the threat intelligence platform.

OpenCTI contains insufficient authorization controls in the profile edit functionality (CWE-284, CWE-657). An authenticated attacker with low-privilege credentials can escalate privileges to administrator level through this vector. Successful exploitation grants complete control over the platform, including threat intelligence data and user management.