---
id: CVE-2026-61707
title: >-
  SOCFortress CoPilot: Stored case-report template injection permits backend
  code execution
summary: >-
  SOCFortress CoPilot focuses on providing a single pane of glass for all your
  security operations needs. Prior to 0.1.76, in the reported deployment,
  case-report templates uploaded by `customer_user`, the lowest-privilege portal
  role, are…
severity: critical
cvss: 9
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-94
  - CWE-862
  - CWE-1336
vendor: socfortress
product: CoPilot
affected:
  - CoPilot < 0.1.76
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-30T15:34:47.697339Z'
published: '2026-10-29'
updated: '2026-10-30'
sourceUpdated: '2026-10-30T15:59:08.843Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-61707'
references:
  - url: >-
      https://github.com/socfortress/CoPilot/security/advisories/GHSA-7q83-228r-wfh5
    label: >-
      https://github.com/socfortress/CoPilot/security/advisories/GHSA-7q83-228r-wfh5
  - url: 'https://github.com/socfortress/CoPilot/pull/936'
    label: 'https://github.com/socfortress/CoPilot/pull/936'
  - url: >-
      https://github.com/socfortress/CoPilot/commit/a5ed4a250094d1b6d15ba0ec088dbd773ab1b4e0
    label: >-
      https://github.com/socfortress/CoPilot/commit/a5ed4a250094d1b6d15ba0ec088dbd773ab1b4e0
  - url: 'https://github.com/socfortress/CoPilot/tree/v0.1.76'
    label: 'https://github.com/socfortress/CoPilot/tree/v0.1.76'
tags:
  - cve.org
epss: 0.00235
epssPercentile: 0.14513
ingestedAt: '2026-11-05T16:24:31.049Z'
---

## Overview

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, in the reported deployment, case-report templates uploaded by `customer_user`, the lowest-privilege portal role, are later executed by non-sandboxed Jinja2 engines when an admin or analyst generates a report. The `/case-report-template/upload` route in `backend/app/incidents/routes/db_operations.py` validates only the filename-derived MIME type, not the template content. Templates share a global store without customer_code scoping, and `customer_user` can also list, download and delete them, allowing an attacker to replace a legitimate default template under the same name. In `backend/app/incidents/services/reports.py`, `render_document_with_context` uses `DocxTemplate` without a sandbox; in `backend/app/incidents/services/reports_pdf.py`, `render_html_template` uses a non-sandboxed `Environment` without autoescaping. Normal privileged requests to `POST /api/incidents/report/generate-report-docx` or `/generate-report-pdf` therefore evaluate attacker-controlled Jinja expressions as Python on the backend. The reported deployment executes commands as root, exposing all tenants' incident and SIEM data and stored connector credentials. The HTML/PDF wkhtmltopdf renderer additionally permits local-file reads and requests to internal services. This issue is fixed in version 0.1.76.

## Affected

- `CoPilot < 0.1.76`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.