Beenuar vulnerabilities
We track 3 vulnerabilities in Beenuar products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 30, 2026.
Latest Beenuar vulnerabilities
- 9.0 Critical severity
AiSOC: Improper Neutralization of Special Elements used in an OS Command
AiSOC versions 7.2.0 before 12.0.0 contain a command injection vulnerability in the actions service that builds CrowdStrike Real Time Response command strings by interpolating unescaped action parameters in crowdstrike_rtr.py and endpoint.py. Authenticated use
- 7.5 High severity
AiSOC: Use of Hard-coded Cryptographic Key
AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitr
- 7.1 High severity
AiSOC: Authorization Bypass Through User-Controlled Key
AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to claim