CVE-2026-61707: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to…

Summary

CoPilot versions before 0.1.76 let a customer_user, the lowest-privilege portal role, upload case-report templates that are later rendered without a sandbox by Jinja2 engines when an admin or analyst generates a report. The upload route validates only the filename-derived MIME type, and the shared template store lacks customer_code scoping, so an attacker can replace a default template. In the reported deployment, attacker Jinja expressions run as Python on the backend with root privileges, exposing all tenants' incident and SIEM data and stored connector credentials. The wkhtmltopdf HTML/PDF renderer also permits local-file reads and internal requests.

Mitigation

Fixed in 0.1.76.

Topics

• Coding assistants

Related items

• LowAnthropic-Themed Phishing Emails Bypass Top Security ToolsSimilar attack · Dark Reading
• HighCVE-2026-118758: Kubeflow Pipelines path traversal in GET /artifacts/get volume handlerSimilar attack · NVD/CVE Database
• HighGHSA-w9x9-j56r-h98r: @eeacms/volto-chatbot has Unauthenticated Danswer API Confused Deputy ProxySimilar attack · GitHub Advisory Database
• HighGHSA-q344-5v34-gm84: @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEYSimilar attack · GitHub Advisory Database
• HighGHSA-26mh-57q7-jfvr: PraisonAI vulnerable to Remote Code Execution via Broken AST SandboxSimilar attack · GitHub Advisory Database