Vulnerabilities in Cap-go
42 resultsCVE-2026-88861HIGHCapgo AAL1 Session MFA Bypass via Direct RBAC AuthorizationEPSS 0.5%CVE-2026-88862HIGHCapgo API Key Manager Authentication Bypass via x-limited-key-idEPSS 0.4%CVE-2026-56081CRITICALCap-go - Account Lockout via 2FA Misconfiguration on Unverified EmailEPSS 0.4%CVE-2026-100622HIGHcapgo.app through 12.129.0 Cache Restoration of Deleted BundlesEPSS 0.4%CVE-2026-56248HIGHCapgo - Unauthenticated Denial-of-Service via audit_logs RLS PolicyEPSS 0.4%CVE-2026-100614HIGHCapgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata WorkerEPSS 0.4%CVE-2026-100619HIGHCapgo OTA Manifest Poisoning via app_versions.manifest BypassEPSS 0.4%CVE-2026-100623HIGHCapgo Authentication Bypass via Direct PostgREST org_users Table WriteEPSS 0.4%CVE-2026-100615HIGHCap-go capgo.app before 12.267.1 Privilege Escalation via API Key RotationEPSS 0.4%CVE-2026-88863HIGHcapgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_orgEPSS 0.4%CVE-2026-100617HIGHCap-go capgo.app Authorization Bypass via channel_permission_overridesEPSS 0.4%CVE-2026-56082HIGHCapgo - Unauthenticated Cross-Tenant Billing Log Tampering via public.record_build_time RPCEPSS 0.4%CVE-2026-88864CRITICALCapgo SSO Provider Authentication Bypass via PostgREST Direct WriteEPSS 0.4%CVE-2026-56080MEDIUMCap-go - Authentication Logic Flaw in Enforce Password PolicyEPSS 0.4%CVE-2026-56339HIGHCapgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPCEPSS 0.4%CVE-2026-100627HIGHCapgo bundle promotion API channel RBAC deny override bypassEPSS 0.4%CVE-2026-56235MEDIUMCapgo - Unauthenticated Cross-Tenant Metrics Disclosure via RPC FunctionsEPSS 0.3%CVE-2026-56221HIGHCap-go - SQL Injection in Cloudflare Analytics Engine Queries via cloudflare.tsEPSS 0.3%CVE-2026-56245HIGHSupabase Capgo - Unauthenticated Cross-Tenant Build-Time Accounting Poisoning via record_build_time RPCEPSS 0.3%CVE-2026-100612HIGHCapgo SSO Provider ID Authentication Bypass via Incomplete MigrationEPSS 0.3%