{"id":"CVE-2026-61707","aliases":[],"cve":{"records":[{"id":"CVE-2026-61707","source":"GitHub_M","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-07-10T18:51:13.919Z","published":"2026-10-29T21:25:01.101Z","modified":"2026-10-30T15:59:08.843Z"}],"publishers":[{"name":"GitHub_M","role":"CNA","organizationId":"a0819718-46f1-4df5-94e2-005712e83aaa","modified":"2026-10-29T21:25:01.101Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T15:59:08.843Z"}],"references":[{"url":"https://github.com/socfortress/CoPilot/security/advisories/GHSA-7q83-228r-wfh5","tags":["x_refsource_CONFIRM"],"source":"GitHub_M"},{"url":"https://github.com/socfortress/CoPilot/pull/936","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/socfortress/CoPilot/commit/a5ed4a250094d1b6d15ba0ec088dbd773ab1b4e0","tags":["x_refsource_MISC"],"source":"GitHub_M"},{"url":"https://github.com/socfortress/CoPilot/tree/v0.1.76","tags":["x_refsource_MISC"],"source":"GitHub_M"}],"weaknesses":[{"id":"CWE-94","description":"CWE-94: Improper Control of Generation of Code ('Code Injection')","source":"GitHub_M"},{"id":"CWE-862","description":"CWE-862: Missing Authorization","source":"GitHub_M"},{"id":"CWE-1336","description":"CWE-1336: Improper Neutralization of Special Elements Used in a Template Engine","source":"GitHub_M"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T15:34:47.697339Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"SOCFortress CoPilot: Stored case-report template injection permits backend code execution","titleSource":"GitHub_M","descriptionSource":"GitHub_M","description":"SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2 engines when an admin or analyst generates a report. The `/case-report-template/upload` route in `backend/app/incidents/routes/db_operations.py` validates only the filename-derived MIME type, not the template content. Templates share a global store without customer_code scoping, and `customer_user` can also list, download and delete them, allowing an attacker to replace a legitimate default template under the same name. In `backend/app/incidents/services/reports.py`, `render_document_with_context` uses `DocxTemplate` without a sandbox; in `backend/app/incidents/services/reports_pdf.py`, `render_html_template` uses a non-sandboxed `Environment` without autoescaping. Normal privileged requests to `POST /api/incidents/report/generate-report-docx` or `/generate-report-pdf` therefore evaluate attacker-controlled Jinja expressions as Python on the backend. The reported deployment executes commands as root, exposing all tenants' incident and SIEM data and stored connector credentials. The HTML/PDF wkhtmltopdf renderer additionally permits local-file reads and requests to internal services. This issue is fixed in version 0.1.76.","score":9,"severity":"critical","published":"2026-10-29T21:25:01.101Z","modified":"2026-10-30T15:59:08.843Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"socfortress","name":"CoPilot","platforms":[],"versions":[{"version":"< 0.1.76","status":"affected"}],"cpes":[],"source":"GitHub_M","url":"https://www.cve.org/CVERecord?id=CVE-2026-61707"}],"remediation":[],"references":["https://github.com/socfortress/CoPilot/security/advisories/GHSA-7q83-228r-wfh5","https://github.com/socfortress/CoPilot/pull/936","https://github.com/socfortress/CoPilot/commit/a5ed4a250094d1b6d15ba0ec088dbd773ab1b4e0","https://github.com/socfortress/CoPilot/tree/v0.1.76"],"sources":[{"name":"CVE","id":"CVE-2026-61707","modified":"2026-10-30T15:59:08.843Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-61707"}],"assessments":[{"source":"GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","score":9}],"sourceAffected":[],"observedAt":"2026-10-30T17:19:53.954Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T04:10:31.776Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-10-29T23:05:33.887Z","attemptedAt":"2026-10-29T23:05:33.887Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-29T23:05:33.413Z","attemptedAt":"2026-10-29T23:05:33.413Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T23:05:33.346Z","attemptedAt":"2026-10-29T23:05:33.346Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-29T23:05:33.287Z","attemptedAt":"2026-10-29T23:05:33.287Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-113399","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113399","modified":"Oct 29, 2026, 9:25:01 PM","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","checkedAt":"2026-10-29T23:05:33.346Z"},{"source":"NVD","id":"CVE-2026-61707","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61707","modified":"2026-10-29T22:17:05.603","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","checkedAt":"2026-10-29T23:05:33.887Z"}],"aiSummary":{"text":"SOCFortress CoPilot versions prior to 0.1.76 have a stored template injection vulnerability, allowing a low-privilege user to inject malicious code, which is executed by the backend. This weakness may expose sensitive data. The issue is fixed in version 0.1.76.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:25:47.105Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-61707"}]}}