SE
Product
security
2
CVEs
0
On KEV
9.0
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55176 | 9.0 | Sep 30 | Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token Affected: <= 0.2.247 |
| CVE-2026-46711 | 8.3 | Sep 30 | Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network Affected: <= 0.2.247 |
Showing 2