Socfortress vulnerabilities
We track 8 vulnerabilities in Socfortress products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Socfortress vulnerabilities
- 7.5 High severity
CoPilot: Improper Authentication
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in `backend/app/incidents/routes/incident_alert.py` omit role and tenant authorizatio
- 10.0 Critical severity
CoPilot: Improper Limitation of a Pathname to a Restricted Directory
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, `POST /api/scoutsuite/generate-gcp-report` in `backend/app/integrations/scoutsuite/routes/scoutsuite.py` admits admin and analyst users and
- 9.3 Critical severity
CoPilot: Exposure of Sensitive Information to an Unauthorized Actor
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deployments, the unauthenticated `/scoutsuite-report` `StaticFiles` mount in `backend/copilot.py` exposes the `scoutsuite-report` directory even
- 9.4 Critical severity
CoPilot: Missing Authentication for Critical Functionality
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `verify_graylog_header` in `backend/app/active_response/routes/graylog.py` and `verify_velociraptor_header` in `backend/app/incidents/route
- 9.9 Critical severity
CoPilot: Improper Neutralization of Input During Web Page Generation
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the respective 0.1.70 and 0.1.76 sink repairs, portal users, including `customer_user`, can submit stored markup through `PO
- 8.5 High severity
CoPilot: Improper Access Control
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `POST /api/agent_data_store/upload` in `backend/app/data_store/data_store_routes.py` permits `customer_user` callers to choose `bucket_name
- 9.0 Critical severity
CoPilot: Improper Control of Generation of Code
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed by non-
- 10.0 Critical severity
CoPilot: Improper Authentication
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as a fallback value in backend/app/auth/utils.py:28 and ships it verbatim in .env.