The vulnerability in misp-stix occurs due to improper input validation and untrusted parser selection based on STIX document metadata (labels or titles controlled by the document producer). When STIX2 content is incorrectly handled as an internal MISP export, the system copies the entire x_misp_attributes dictionary from the STIX bundle to MISP attributes without restricting fields. This allows an attacker supplying a crafted STIX document to inject security-sensitive properties like distribution, sharing_group_id, and tags. The flaw corresponds to CWE-20 (Improper Input Validation), CWE-807 (Improper Control of a Resource Through its Lifetime), and CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes). The attack aligns with CAPEC-153, where input data manipulation causes unintended processing paths. No official patch or remediation level is indicated, and no known exploits are reported in the wild.

An attacker able to import a crafted STIX document can manipulate MISP attribute metadata, including distribution and sharing restrictions, potentially causing sensitive information to be shared beyond intended boundaries or influencing automated processing based on attacker-controlled tags. This may lead to policy violations or incorrect handling of threat intelligence data within the importing organization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability fix involves introducing an explicit classification parameter to override parser selection based on untrusted document metadata and implementing an allow-list to restrict which attribute fields can be modified during import. Until an official fix is available, organizations should exercise caution when importing STIX documents from untrusted sources and consider manual validation of imported attributes.