CVE-2025-61782Medium· 5.4▾ SunlitOpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callbac…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.2%
0.2% → 0.3%
6.1 → 5.4
Last analysed / modified upstream
OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.
opencti < 6.8.3Upgrade past the affected range:
opencti 6.8.3Affected packages:
pycti < 6.8.3Patched in:
pycti 6.8.3Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-61781High· 7.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-76820High· 7.7OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-76821High· 7.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-35211Medium· 6.5OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-35210High· 7.1OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables
CVE-2026-116578Low· 2.1Tornado: Open redirect in RedirectHandler via protocol-relative URLs