Arbitrary File Write Vulnerability in SOCFortress CoPilot

CVE-2026-61738

What is CVE-2026-61738?

The SOCFortress CoPilot software has a vulnerability that allows unauthorized users to write files outside the intended directory due to improper validation of uploaded content. Specifically, the issue arises from the way file names are handled in the 'generate-gcp-report' endpoint, paving the way for potential disruption of normal operations. The vulnerability exists prior to version 0.1.77, which includes necessary improvements for safeguarding against such exploits. The issue permits unauthorized writes to critical files and locations, though it does not inherently enable unrestricted execution or cross-tenant data exposure.

References