affected:
- package:
    ecosystem: PyPI
    name: pycti
    purl: pkg:pypi/pycti
  ranges:
  - events:
    - introduced: 6.4.8
    - fixed: 6.4.11
    type: ECOSYSTEM
  versions:
  - 6.4.10
  - 6.4.8
  - 6.4.9
aliases:
- CVE-2025-24977
- GHSA-mf88-g2wq-p7qm
details: OpenCTI is an open cyber threat intelligence (CTI) platform. Prior to version
  6.4.11 any user with the capability `manage customizations` can execute commands
  on the underlying infrastructure where OpenCTI is hosted and can access internal
  server side secrets by misusing the web-hooks. Since the malicious user gets a root
  shell inside a container this opens up the the infrastructure environment for further
  attacks and exposures. Version 6.4.11 fixes the issue.
id: PYSEC-2025-179
modified: '2026-05-20T09:19:14.224246Z'
published: '2025-05-05T17:18:47.397Z'
references:
- type: ADVISORY
  url: https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-mf88-g2wq-p7qm
severity:
- score: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
  type: CVSS_V3