CVE-2026-56447 | MISP up to 2.5.41 INI File Kafka_rdkafka_config inclusion of functionality from untrusted control sphere

A vulnerability classified as problematic was found in MISP up to 2.5.41. This vulnerability affects unknown code of the component INI File Handler. Executing a manipulation of the argument Kafka_rdkafka_config can lead to inclusion of functionality from untrusted control sphere.

The identification of this vulnerability is CVE-2026-56447. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.