Socfortress Copilot vulnerabilities
- socfortress copilot SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression) 7.5 High
- socfortress copilot SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) 10.0 Critical
- socfortress copilot SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount 9.3 Critical
- socfortress copilot SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection 9.4 Critical
- socfortress copilot SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover 9.9 Critical
- socfortress copilot SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user) 8.5 High
- socfortress copilot SOCFortress CoPilot: Stored case-report template injection permits backend code execution 9.0 Critical
- socfortress copilot SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools 10.0 Critical