EUVD lists CVSS 9.0 template execution flaw in SOCFortress CoPilot before 0.1.76
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- SOCFortress
- Product
- CoPilot
- First seen
Summary
The EUVD entry EUVD-2026-113399 describes a CoPilot issue, prior to 0.1.76, in which case-report templates uploaded by the lowest-privilege customer_user role are later executed. The item gives a CVSS v3.1 score of 9.0.
If you use SOCFortress
Upgrade SOCFortress CoPilot to version 0.1.76 or later
Restrict customer_user uploads of case-report templates
Review existing uploaded templates for unexpected code
Upgrade SOCFortress CoPilot to version 0.1.76 or later.
Audit case-report templates uploaded by customer_user accounts.
Limit portal upload permissions until the upgrade is applied.
What the sources say 4
· Mastodon: “Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed...” Source
· Mastodon: “Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later exe...” Source
· Mastodon: “Prior to 0.1.77, `POST /api/scoutsuite/generate-gcp-report` in `backend/app/integrations/scoutsuite/routes/scoutsuite.py` admits admin and analyst ...” Source
· Mastodon: “In affected deployments, the unauthenticated `/scoutsuite-report` `StaticFiles` mount in `backend/copilot.py` exposes the `scoutsuite-report` direct...” Source