Vulnerability Description
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as a fallback value in backend/app/auth/utils.py:28 and ships it verbatim in .env.example. Any deployment where JWT_SECRET is not explicitly set — including the default Docker Compose setup — signs all authentication tokens with this publicly known value. An unauthenticated attacker can forge arbitrary admin-scoped JWTs and gain full control of the application and every security tool it manages without any credentials. This vulnerability is fixed in 0.1.57.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/socfortress/CoPilot/commit/4640511a0cf2e7b144a71375b5b349a831
- https://github.com/socfortress/CoPilot/pull/814
- https://github.com/socfortress/CoPilot/security/advisories/GHSA-4gxj-hw3c-3x2x
- https://github.com/socfortress/CoPilot/security/advisories/GHSA-4gxj-hw3c-3x2x
FAQ
What is CVE-2026-42869?
CVE-2026-42869 is a vulnerability with a CVSS score of 10.0 (CRITICAL). SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.57, SOCFortress CoPilot ships a hardcoded JWT signing secret as a fallback value in...
How severe is CVE-2026-42869?
CVE-2026-42869 has been rated CRITICAL with a CVSS base score of 10.0/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-42869?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.