CVE-2026-88860: falha crítica em Cap-go capgo.app
Capgo Authorization Bypass via Stale Channel Permission Overrides
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.3epss 0.3%
Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OTA versions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Cap-go · capgo.appCVEs relacionadas — Cap-go capgo.app
No mesmo produto, das mais perigosas para as menos.
CVE-2026-88861HIGHCapgo AAL1 Session MFA Bypass via Direct RBAC AuthorizationEPSS 0.5%CVE-2026-88862HIGHCapgo API Key Manager Authentication Bypass via x-limited-key-idEPSS 0.4%CVE-2026-100622HIGHcapgo.app through 12.129.0 Cache Restoration of Deleted BundlesEPSS 0.4%CVE-2026-100623HIGHCapgo Authentication Bypass via Direct PostgREST org_users Table WriteEPSS 0.4%CVE-2026-100619HIGHCapgo OTA Manifest Poisoning via app_versions.manifest BypassEPSS 0.4%CVE-2026-100614HIGHCapgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata WorkerEPSS 0.4%