CVE-2026-42869

{
  "id": "CVE-2026-42869",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-11T20:25:43.347",
  "lastModified": "2026-10-26T18:10:00.173",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as a fallback value in backend/app/auth/utils.py:28 and ships it verbatim in .env.example. Any deployment where JWT_SECRET is not explicitly set — including the default Docker Compose setup — signs all authentication tokens with this publicly known value. An unauthenticated attacker can forge arbitrary admin-scoped JWTs and gain full control of the application and every security tool it manages without any credentials. This vulnerability is fixed in 0.1.57."
    },
    {
      "lang": "es",
      "value": "SOCFortress CoPilot se centra en proporcionar un único panel de control para todas sus necesidades de operaciones de seguridad. Antes de la versión 0.1.57, SOCFortress CoPilot distribuye un secreto de firma JWT codificado de forma rígida como valor de reserva en backend/app/auth/utils.py:28 y lo distribuye textualmente en .env.example. Cualquier despliegue donde JWT_SECRET no se establece explícitamente -incluyendo la configuración predeterminada de Docker Compose- firma todos los tokens de autenticación con este valor conocido públicamente. Un atacante no autenticado puede falsificar JWTs arbitrarios con alcance de administrador y obtener control total de la aplicación y de cada herramienta de seguridad que gestiona sin ninguna credencial. Esta vulnerabilidad se corrige en la versión 0.1.57."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "socfortress",
          "product": "CoPilot",
          "versions": [
            {
              "version": "< 0.1.57",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "baseScore": 10.0,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 6.0
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-12T13:27:13.898141Z",
          "id": "CVE-2026-42869",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        },
        {
          "lang": "en",
          "value": "CWE-522"
        },
        {
          "lang": "en",
          "value": "CWE-798"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/socfortress/CoPilot/commit/4640511a0cf2e7b144a71375b5b349a8318cb186",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/socfortress/CoPilot/pull/814",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-4gxj-hw3c-3x2x",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/socfortress/CoPilot/security/advisories/GHSA-4gxj-hw3c-3x2x",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}