CVE-2026-61738

Name of the Vulnerable Software and Affected Versions SOCFortress CoPilot versions prior to 0.1.77

Description The application allows admin and analyst users to upload content via the 'POST /api/scoutsuite/generate-gcp-report' endpoint. The system validates the content as GCPScoutSuiteJSON but fails to sanitize the file.filename variable from the multipart header before passing it to the save file to directory() function. Because the filename is combined with the report directory using os.path.join without a resolved-path containment check, a path traversal attack can be used to write files outside the intended directory. In environments where the backend runs with root privileges, this allows overwriting host files within the application source directory, which can disrupt application operations.

Recommendations Update to version 0.1.77.