Stored Cross-Site Scripting Vulnerability in SOCFortress CoPilot

CVE-2026-61728

What is CVE-2026-61728?

The vulnerability in SOCFortress CoPilot allows attackers to inject malicious scripts through user comments that, when viewed by others, execute within the application context. This occurs due to improper handling of user input in the comment section, leading to stored XSS attacks. The attacker can take advantage of this by submitting crafted comments which, if viewed by an analyst or administrator, could lead to token theft and unauthorized actions within the platform, including access to sensitive data and modification of security incidents. The vulnerability affects versions prior to 0.1.70 for health-check repairs and prior to 0.1.76 for comment submissions. It is crucial for users to update to the latest versions to mitigate these security risks.

References