Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-55176— Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token

Quick assessment

Affected
Soft-Machine-io security
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Soft Machine 是一个基于虚拟机的智能体开发环境/云操作系统。在 0.2.247 及更早版本中， 中的两个身份验证辅助函数 和 接受全局的 作为 Bearer Token，但未验证调用者所属的工作区。由于该密钥在 Fly 应用中的每个容器上都设置为相同的值，并且可以从每个工作区内的用户可见进程环境中访问，因此任何租户都可以使用该密钥向其他租户的工作区 API 进行身份验证。其结果是，任何付费客户的 shell 都可以访问跨工作区的读取、写入以及破坏性恢复操作。现有的每工作区令牌检查机制（ ）保护了面向用户

CVSS 9.0 · Critical
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-55176

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token
Source: CVE Program / CVE List V5
Vulnerability Description
Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js — verifyContainerAuth() and authenticateWorkspaceHttp() — accept the global CONTAINER_SHARED_SECRET as a bearer token without verifying which workspace the caller belongs to. Because that secret is set identically on every container in the Fly app and is reachable from the user-facing process environment inside each workspace, any tenant can use it to authenticate to any other tenant's workspace API. The result is cross-workspace read, write, and destructive-restore primitives reachable from any paying customer's shell. The existing per-workspace token check (workspaceTokenMatches) protects the user-facing per-workspace token path, but the shared-secret bearer path bypasses it entirely. At time of publication, there are no publicly known patches.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Soft-Machine-io security <= 0.2.247 -

II. Public POCs for CVE-2026-55176

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-55176

请登录查看更多情报信息。

Other References for CVE-2026-55176 (1)

IV. Related Vulnerabilities

Same product: security
Same vendor: Soft-Machine-io
Same weakness: CWE-863

V. Comments for CVE-2026-55176

No comments yet

Leave a comment