CA
Product
capgo.app
23
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 13Medium 9Low 0
Watch
Add capgo.app to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-100623 | 8.8 | Sep 26 | Capgo Authentication Bypass via Direct PostgREST org_users Table Write Affected: 0 |
| CVE-2026-100619 | 8.8 | Sep 26 | Capgo OTA Manifest Poisoning via app_versions.manifest Bypass Affected: 0 |
| CVE-2026-100617 | 8.8 | Sep 26 | Cap-go capgo.app Authorization Bypass via channel_permission_overrides Affected: 0 |
| CVE-2026-100615 | 8.8 | Sep 26 | Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation Affected: before 12.267.1 |
| CVE-2026-100614 | 8.8 | Sep 26 | Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker Affected: before 12.244.1 |
| CVE-2026-88862 | 8.8 | Sep 10 | Capgo API Key Manager Authentication Bypass via x-limited-key-id Affected: through 12.242.4 |
| CVE-2026-100618 | 8.5 | Sep 26 | Capgo App Icon Update Privilege Escalation via Service-Role Worker Affected: 0 |
| CVE-2026-88861 | 8.3 | Sep 10 | Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization Affected: 0 |
| CVE-2026-100627 | 8.1 | Sep 26 | Capgo bundle promotion API channel RBAC deny override bypass Affected: 0 |
| CVE-2026-88863 | 8.1 | Sep 10 | capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_org Affected: through 12.207.1 |
| CVE-2026-100622 | 7.5 | Sep 26 | capgo.app through 12.129.0 Cache Restoration of Deleted Bundles Affected: through 12.129.0 |
| CVE-2026-100612 | 7.2 | Sep 26 | Capgo SSO Provider ID Authentication Bypass via Incomplete Migration Affected: through 12.261.0 |
| CVE-2026-100625 | 7.1 | Sep 26 | Capgo Build Upload Proxy Authorization Bypass via TUS Resource Affected: 0 |
Showing 13