CVE-2026-61738

{
  "etk_id": "ETK-2026-3088",
  "cve_id": "CVE-2026-61738",
  "display_id": "CVE-2026-61738",
  "ghsa_id": "GHSA-q3g8-3cf7-744f",
  "euvd_id": "EUVD-2026-114001",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Path traversal file write in socfortress CoPilot",
  "summary": "socfortress CoPilot versions before 0.1.77 mishandle upload filenames in the ScoutSuite GCP report endpoint. An authenticated administrator or analyst can write accepted JSON content outside the intended report directory, potentially overwriting files and disrupting the application.",
  "mitigation": "Upgrade CoPilot to version 0.1.77 or later. Until upgraded, restrict administrator and analyst access to the affected GCP report upload function.",
  "vendor": "socfortress",
  "product": "CoPilot",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "< latest"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "latest"
      ],
      "package_name": "socfortress/CoPilot",
      "purl": null
    }
  ],
  "cwes": [
    22
  ],
  "cvss_score": 10,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 29.330419533333334,
  "t0_at": "2026-10-30T14:36:10.445000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-10-30T14:36:10.445000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-30T14:36:10.445000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-61738"
    }
  }
}