Advisories · Technology
Soft-Machine-io security.
Every CVE that names Soft-Machine-io security among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.0 CriticalCritical · CVSS 9+
Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token
- Soft-Machine-io security
- Broken access control
- CVSS 8.3 High
Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network
- Soft-Machine-io security
- Authentication bypass