{"id":31484,"date":"2026-10-01T04:31:31","date_gmt":"2026-09-30T20:31:31","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-55176"},"modified":"2026-10-01T04:31:31","modified_gmt":"2026-09-30T20:31:31","slug":"cve-2026-55176","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-55176","title":{"rendered":"CVE-2026-55176 [CRITICAL] &#8211; Soft Machine is a Virtual Machine\u2013based agentic development environment \/ Cloud OS. In ver"},"content":{"rendered":"<p>Soft Machine is a Virtual Machine\u2013based agentic development environment \/ Cloud OS. In versions 0.2.247 and prior, two authentication helpers in \/app\/server.js \u2014 verifyContainerAuth() and authenticateWorkspaceHttp() \u2014 accept the global CONTAINER_SHARED_SECRET as a bearer token without verifying which workspace the caller belongs to. Because that secret is set identically on every container in the Fly app and is reachable from the user-facing process environment inside each workspace, any tenant can use it to authenticate to any other tenant&#8217;s workspace API. The result is cross-workspace read, write, and destructive-restore primitives reachable from any paying customer&#8217;s shell. The existing per-workspace token check (workspaceTokenMatches) protects the user-facing per-workspace token path, but the shared-secret bearer path bypasses it entirely. At time of publication, there are no publicly known patches.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Soft Machine is a Virtual Machine\u2013based agentic development environment \/ Cloud OS. In versions 0.2.247 and prior, two authentication helpers in \/app\/server.js \u2014 verifyContainerAuth() and authenticate<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-31484","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/31484","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=31484"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=31484"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=31484"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}