CVE-2026-61738 | SocFortress CoPilot up to 0.1.76 ScoutSuite Integration Service scoutsuite.py save_file_to_directory filename path traversal

October 30, 2026 Yanac

A vulnerability identified as very critical has been detected in SocFortress CoPilot up to 0.1.76. This affects the function save_file_to_directory of the file backend/app/integrations/scoutsuite/services/scoutsuite.py of the component ScoutSuite Integration Service. This manipulation of the argument filename causes path traversal.

This vulnerability is handled as CVE-2026-61738. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More