CVE-2026-61729 | SocFortress CoPilot up to 0.1.75 Webhook Verification graylog.py verify_graylog_header/verify_velociraptor_header COMMAND/ACTION/VALUE/AGENT_ID improper authentication

October 30, 2026 Yanac

A vulnerability was found in SocFortress CoPilot up to 0.1.75. It has been declared as critical. Impacted is the function verify_graylog_header/verify_velociraptor_header of the file backend/app/active_response/routes/graylog.py of the component Webhook Verification. Executing a manipulation of the argument COMMAND/ACTION/VALUE/AGENT_ID can lead to improper authentication.

This vulnerability appears as CVE-2026-61729. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More