CVE-2026-61708 | SocFortress CoPilot up to 0.1.75 Data Store Upload data_store_routes.py bucket_name/object_name privileges management

October 30, 2026 Yanac

A vulnerability was found in SocFortress CoPilot up to 0.1.75. It has been declared as problematic. Affected is an unknown function of the file backend/app/data_store/data_store_routes.py of the component Data Store Upload. The manipulation of the argument bucket_name/object_name results in improper privilege management.

This vulnerability is known as CVE-2026-61708. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More