CVE-2026-103057GHSA-mqjp-pcpr-7c37
AiSOC 5.1.0 before 12.0.0 Missing Authentication on Realtime Service Internal Endpoints
beenuar AiSOC
CVSS
5.3MediumExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 30 Sep 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 15% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 12.0.0AiSOCCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
AiSOC versions 5.1.0 before 12.0.0 contain an authentication bypass vulnerability in the realtime service internal endpoints POST /internal/agent-event and POST /internal/push. Attackers can post arbitrary events with spoofed tenant identifiers to broadcast malicious content over WebSocket and Redis SSE channels or send unauthorized notifications to registered devices.
Text from CVE List
Affected versions 1
- AiSOCaffected: 5.1.0 before 12.0.0CVE List
References 5
- github.com/beenuar/AiSOC/commit/2f0e954f2febecb3720e6eadb017546c5d121c43Fixvia CVE List
- github.com/beenuar/AiSOC/releases/tag/v12.0.0Fixvia CVE List
- vulncheck.com/advisories/aisoc-5.1.0-before-12.0.0-missing-authentication-on-realtime-service-internal-endpointsAdvisoryvia CVE List
- github.com/beenuar/AiSOC/security/advisories/GHSA-mqjp-pcpr-7c37Exploitvia CVE List
- github.com/beenuar/AiSOC/blob/v11.2.0/services/realtime/src/index.ts#L681-L691Referencevia CVE List