CVE-2026-56335 in Capgo
요약
\~에 의해 MITRE • 2026. 07. 10.
Capgo before 12.128.2 contains an authorization bypass vulnerability where write-scoped API keys can directly mutate protected channel configuration fields through PostgREST by exploiting a null authentication check in the immutability trigger. Attackers with write API keys can modify sensitive channel attributes such as public, allow_emulator, and security-related flags outside intended application routes.
If you want to get best quality of vulnerability data, you may have to visit VulDB.