{"data":{"id":"d7dc6011-d7e8-4e33-9aa3-ad126fe9713c","title":"CVE-2026-61730: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected…","summary":"SOCFortress CoPilot exposes its `scoutsuite-report` directory through an unauthenticated `/scoutsuite-report` StaticFiles mount in `backend/copilot.py`, even though normal /api routes require JWT authentication. The directory holds generated AWS, Azure and GCP reports and `scoutsuite-results/scoutsuite_results_<name>.js` files that disclose IAM principals, resource inventories and findings. During a GCP scan, the uploaded Google service-account JSON key is saved into that same web-served directory and removed only after the scan finishes, so an anonymous client can retrieve it and use the service account's cloud permissions.","solution":"Credential isolation is released in version 0.1.77; a release fully remediating the report-disclosure component has not been established.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-61730","publishedAt":"2026-10-30T15:16:53.223Z","cveId":"CVE-2026-61730","cweIds":["CWE-200","CWE-306","CWE-522","CWE-552"],"cvssScore":"9.3","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["SOCFortress CoPilot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"SOCFortress CoPilot unauthenticated access to ScoutSuite reports and GCP keys","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-30T18:10:28.438Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-30T18:10:32.880Z","patchAvailable":null,"disclosureDate":"2026-10-30T15:16:53.223Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-115","CAPEC-116"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.7,"researchCategory":null,"atlasIds":null,"fixes":[]}}