PT-2026-51222 · Cap Go · Cap-Go

Publicado 2026-06-21 · Atualizado 2026-06-21 · CVE-2026-56251

Mitre

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Capgo before 12.128.2 contains a broken row level security policy in the org users table that allows authenticated users to elevate privileges from admin to super admin. Attackers can exploit the insufficient RLS enforcement to gain unauthorized super admin access and compromise system security.

Correção

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2026-56251

Produtos afetados

Cap-Go

Referências · 3

• https://github.com/Cap-go/capgo/security/advisories/GHSA-9xqh-f26v-9c9h · Aviso do Fabricante
• https://vulncheck.com/advisories/capgo-privilege-escalation-via-broken-row-level-security-in-org-users · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-56251 · Nota de Segurança