CVE-2026-61739 SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)

SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, the Velociraptor Sigma exclusion-management endpoints in backend/app/incidents/routes/incidentalert.py omit role and tenant authorization, and POST...

CVE-2026-61739

Prior to version 0.1.77 , SOCFortress CoPilot is vulnerable to an authentication bypass and missing authorization in its Velociraptor Sigma exclusion-management endpoints. The POST /api/incidents/alerts/create/velo-sigma/exclusion endpoint fails to validate credentials because a dependency incorr...