All vulnerabilities
CVE-2026-103055GHSA-4m55-xhcm-wjcr

AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret

beenuar AiSOC
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 2 Oct 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.40%Chance of exploitation activity in the next 30 days, higher than 33% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in12.0.0Fixed versionCVE List
Published30 Sep 2026Updated 2 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbitrary tenant identifiers to access cross-tenant live alerts, cases, agent events and graph updates through the realtime endpoints.

Text from CVE List

Affected versions 1

  • AiSOCaffected: 7.5.0 before 12.0.0CVE List

References 5