CVE-2026-61729

SOCFortress CoPilot versions prior to 0.1.76 are vulnerable to unauthenticated active-response invocation and alert injection due to a hardcoded default header secret . The functions verify_graylog_header and verify_velociraptor_header use a publicly known fallback value shipped in .env.example i...