CVE-2026-44364 is a critical CSRF vulnerability in MISP misp-modules (<= 3.0.7) where the home blueprint endpoint lacked CSRF protection. This flaw allows attackers to cause authenticated users to perform unintended actions by submitting forged requests, potentially modifying session query data. The vulnerability was fixed by enabling CSRF protection on the home blueprint and hardening query parsing to prevent exploitation.

An attacker can exploit this vulnerability to perform unauthorized actions on behalf of an authenticated user by submitting forged requests to the home endpoint. This can result in modification of session query data, potentially impacting the integrity of user sessions and application behavior. The CVSS 4.0 score of 9.3 indicates a critical severity with network attack vector, low attack complexity, no privileges required beyond user authentication, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor has fixed the issue by enabling CSRF protection on the affected blueprint and hardening query parsing. Users should upgrade to a version later than 3.0.7 once available or apply any official patches provided by the MISP project. Until then, consider restricting access to the affected endpoints and monitoring for suspicious activity related to session query modifications.