Soft-Machine-io
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| security | 2 | – | Sep 30, 2026 |
Exploited and recent CVEs
- CVE-2026-55176 Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token 0.3%
- CVE-2026-46711 Soft Machine: Unauthenticated workspace API exposes arbitrary file read & directory exfiltration to any peer on the Fly private network 0.3%