MISP has a privilege escalation vulnerability in its tag collection creation and editing functionality. An authenticated user with tag editor permissions can exploit this flaw by including additional model data in requests, leading to unauthorized creation or modification of User and Organisation records. This allows escalation from tag editor to site administrator. The vulnerability affects MISP versions prior to 2.5.48.