PT-2026-51219 · Cap Go · Cli

Judel777 · Publicado 2026-06-21 · Atualizado 2026-06-21 · CVE-2026-56236

NVD

CVSS v3.1

6.1

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create malicious symlinks in repositories to overwrite arbitrary files or expose credentials with world-readable permissions when developers run the CLI.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2026-56236

Produtos afetados

Cli

Referências · 3

• https://github.com/Cap-go/capgo/security/advisories/GHSA-8mpm-q7mh-8fvh · Aviso do Fabricante
• https://vulncheck.com/advisories/capgo-cli-arbitrary-file-overwrite-via-symlink-following-in-local-credential-operations · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56236 · Nota de Segurança