CVE-2026-42869

תיאור (מקור, אנגלית)

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as a fallback value in backend/app/auth/utils.py:28 and ships it verbatim in .env.example. Any deployment where JWT_SECRET is not explicitly set — including the default Docker Compose setup — signs all authentication tokens with this publicly known value. An unauthenticated attacker can forge arbitrary admin-scoped JWTs and gain full control of the application and every security tool it manages without any credentials. This vulnerability is fixed in 0.1.57.

מדדים

CVSS 3.1

10.0 (CRITICAL) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-2/8/2026

CWE

CWE-287, CWE-522, CWE-798

קישורים

• https://github.com/socfortress/CoPilot/commit/4640511a0cf2e7b144a71375b5b349a8‮…
• https://github.com/socfortress/CoPilot/pull/814
• https://github.com/socfortress/CoPilot/security/advisories/GHSA-4gxj-hw3c-3x2x
• https://github.com/socfortress/CoPilot/security/advisories/GHSA-4gxj-hw3c-3x2x