# CVE-2026-63489: Yeti: Authenticated AQL injection via unvalidated search sorting and filter_aliases parameters

Status: published. Published: 2026-11-03. Updated: 2026-11-09.

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. In version 2.5.0 and earlier, YETI directly interpolates user-controlled sorting fields and filter_aliases attribute paths into ArangoDB AQL identifier and expression positions in core/database_arango.py. A low-privileged authenticated user can send crafted values to POST /api/v2/observables/search, POST /api/v2/entities/search, POST /api/v2/indicators/search, POST /api/v2/dfiq/search, POST /api/v2/search/, or POST /api/v2/graph/search, causing attacker-controlled AQL subexpressions to be parsed and evaluated. This can provide an error oracle, evaluate expressions against internal collections such as users, alter intended search logic, enumerate schema information, and consume excessive database resources. The verified injection points are read and search contexts, so arbitrary database writes are not established. No fixed version is available as of this review.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- yeti-platform / yeti: <= 2.5.0 (affected). Source: CNA: GitHub_M
-  / yeti-platform/yeti (yeti-platform/yeti): <= 2.5.0 (affected, GitHub advisory range). Source: GitHub GHSA-vw33-fwfx-6m9p

## Severity and prioritization

- CVSS 3.1: 7.6 (high); CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L; source: CNA: GitHub_M

- CVSS 3.1: 7.6 (high); CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L; source: NVD: security-advisories@github.com

- CISA KEV: No listing in collected sources

- EPSS: 0.26% as of 2026-11-09; percentile 17.37%

- SSVC: exploitation poc; automatable no; technical impact partial; source ADP: CISA-ADP

- Weaknesses: CWE-943

## Exploit evidence

- exploit: https://github.com/yeti-platform/yeti/security/advisories/GHSA-vw33-fwfx-6m9p (ADP: CISA-ADP)

## References

- https://github.com/yeti-platform/yeti/security/advisories/GHSA-vw33-fwfx-6m9p (CNA: GitHub_M; x_refsource_CONFIRM)

- https://github.com/yeti-platform/yeti/pull/1277 (CNA: GitHub_M; x_refsource_MISC)

- https://github.com/yeti-platform/yeti/commit/89d8b61cf97b0fb2d46c2f9ee8b7411444345fc6 (CNA: GitHub_M; x_refsource_MISC)

- https://github.com/yeti-platform/yeti/releases/tag/2.5.1 (CNA: GitHub_M; x_refsource_MISC)

- https://github.com/yeti-platform/yeti/security/advisories/GHSA-vw33-fwfx-6m9p (ADP: CISA-ADP; exploit)

- https://github.com/yeti-platform/yeti/commit/89d8b61cf97b0fb2d46c2f9ee8b7411444345fc6 (security-advisories@github.com)

- https://github.com/yeti-platform/yeti/pull/1277 (security-advisories@github.com)

- https://github.com/yeti-platform/yeti/releases/tag/2.5.1 (security-advisories@github.com)

- https://github.com/yeti-platform/yeti/security/advisories/GHSA-vw33-fwfx-6m9p (security-advisories@github.com)

- https://github.com/yeti-platform/yeti/security/advisories/GHSA-vw33-fwfx-6m9p (GitHub Security Advisories; advisory)

## Provenance

- CNA: GitHub_M: https://www.cve.org/CVERecord?id=CVE-2026-63489; retrieved 2026-11-09; source updated 2026-11-09

- NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-63489; retrieved 2026-11-04; source updated 2026-11-03

- GitHub Security Advisories: https://github.com/yeti-platform/yeti/security/advisories/GHSA-vw33-fwfx-6m9p; retrieved 2026-11-04; source updated 2026-07-17

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2026-63489; retrieved 2026-11-09; source updated Not reported

Revision: 5fae82a36b9613203cf78fcd7327a0d1d1ee4eac55d33d496c4746915169a7e9

Canonical: https://y2.dev/cve/CVE-2026-63489

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.