CVE-2026-69079 is a resource consumption vulnerability (CWE-770) in the CTI-Transmute product by misp, affecting versions up to and including 1.4.0. The unauthenticated /activity_timeline endpoint accepts a 'days' query parameter that is not restricted to a reasonable range. An attacker can supply an excessively large value, causing the application to process activity data over a very large period. This results in excessive consumption of database, CPU, and memory resources, which can delay or disrupt concurrent request processing and potentially cause internal server errors. The vulnerability is mitigated by clamping the requested timeline range to a minimum of one day and a maximum of 1,095 days.

An unauthenticated remote attacker can exploit this vulnerability to cause excessive resource consumption on the CTI-Transmute server. This can degrade the availability and responsiveness of the service by overloading database, CPU, and memory resources. Repeated exploitation attempts could lead to denial of service conditions or internal server errors, impacting legitimate users.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability is known to be corrected by limiting the 'days' parameter to a range between one and 1,095 days. Until an official fix or update is available, consider implementing request rate limiting or input validation on the 'days' parameter to restrict excessively large values.