CA
Product
capgo.app
23
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 9Low 0
Watch
Add capgo.app to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88864 | 9.1 | Sep 10 | Capgo SSO Provider Authentication Bypass via PostgREST Direct Write Affected: 0 |
| CVE-2026-100623 | 8.8 | Sep 26 | Capgo Authentication Bypass via Direct PostgREST org_users Table Write Affected: 0 |
| CVE-2026-100619 | 8.8 | Sep 26 | Capgo OTA Manifest Poisoning via app_versions.manifest Bypass Affected: 0 |
| CVE-2026-100617 | 8.8 | Sep 26 | Cap-go capgo.app Authorization Bypass via channel_permission_overrides Affected: 0 |
| CVE-2026-100615 | 8.8 | Sep 26 | Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation Affected: before 12.267.1 |
| CVE-2026-100614 | 8.8 | Sep 26 | Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker Affected: before 12.244.1 |
| CVE-2026-88862 | 8.8 | Sep 10 | Capgo API Key Manager Authentication Bypass via x-limited-key-id Affected: through 12.242.4 |
| CVE-2026-100618 | 8.5 | Sep 26 | Capgo App Icon Update Privilege Escalation via Service-Role Worker Affected: 0 |
| CVE-2026-88861 | 8.3 | Sep 10 | Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization Affected: 0 |
| CVE-2026-100627 | 8.1 | Sep 26 | Capgo bundle promotion API channel RBAC deny override bypass Affected: 0 |
| CVE-2026-88863 | 8.1 | Sep 10 | capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org Affected: through 12.207.1 |
| CVE-2026-100622 | 7.5 | Sep 26 | capgo.app through 12.129.0 Cache Restoration of Deleted Bundles Affected: through 12.129.0 |
| CVE-2026-100612 | 7.2 | Sep 26 | Capgo SSO Provider ID Authentication Bypass via Incomplete Migration Affected: through 12.261.0 |
| CVE-2026-100625 | 7.1 | Sep 26 | Capgo Build Upload Proxy Authorization Bypass via TUS Resource Affected: 0 |
| CVE-2026-100611 | 6.5 | Sep 26 | Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-list Affected: through 12.261.0 |
| CVE-2026-88860 | 6.3 | Sep 10 | Capgo Authorization Bypass via Stale Channel Permission Overrides Affected: 0 |
| CVE-2026-100629 | 5.5 | Sep 26 | Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH Affected: before 12.127.5 |
| CVE-2026-100616 | 5.5 | Sep 26 | capgo.app Authentication Bypass via PostgREST customer_id Mutation Affected: 0 |
| CVE-2026-100624 | 5.4 | Sep 26 | Capgo.app before 12.264.5 Upload Expiry Bypass via build upload Affected: before 12.264.5 |
| CVE-2026-100613 | 5.3 | Sep 26 | capgo.app Authorization Bypass via Stale Channel Permission Overrides Affected: 0 |
| CVE-2026-100626 | 4.3 | Sep 26 | capgo through 12.128.2 IDOR via PUT /app icon endpoint Affected: through 12.128.2 |
| CVE-2026-100628 | 4.3 | Sep 26 | capgo.app before 12.128.12 Authentication Bypass via apikey Affected: before 12.128.12 |
| CVE-2026-100621 | 4.3 | Sep 26 | capgo.app Content-Lock Bypass via r2-direct Bundle Mutation Affected: 0 |
Showing 23