{"data":{"id":"fa65ef04-af45-4c9a-9120-d81a3b218e9b","title":"CVE-2026-61708: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to…","summary":"Prior to version 0.1.76, SOCFortress CoPilot's `POST /api/agent_data_store/upload` endpoint in `backend/app/data_store/data_store_routes.py` let `customer_user` callers choose `bucket_name` and `object_name` with no allowlist, tenant prefix, ownership check or content restriction, so existing objects of any tenant could be overwritten. Targets include Sysmon configs distributed to Windows endpoints, server-rendered case report templates, and case and Velociraptor forensic artifacts, letting a lowest-privilege user tamper with cross-tenant evidence, blind endpoint telemetry or poison report templates. Sibling list, download and delete routes stay restricted to admin and analyst roles.","solution":"Fixed in version 0.1.76.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-61708","publishedAt":"2026-10-30T15:16:52.793Z","cveId":"CVE-2026-61708","cweIds":["CWE-284","CWE-639","CWE-862"],"cvssScore":"8.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["SOCFortress CoPilot"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"SOCFortress CoPilot data store upload allows cross-tenant object overwrite","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-30T18:10:28.331Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-30T18:10:33.456Z","patchAvailable":null,"disclosureDate":"2026-10-30T15:16:52.793Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}