PT-2026-56433 · Cap Go · Cap-Go

Judel777 · Publicado 2026-07-08 · Atualizado 2026-07-08 · CVE-2026-56293

NVD

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Capgo before 12.128.2 contains an authorization flaw in transfer app() that fails to update deploy history.owner org when transferring applications between organizations. Attackers can exploit this omission to retain unauthorized access to deployment history records in the source organization or cause the destination organization to lose access to transferred application deployment records.

Exploit

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

CVE-2026-56293

Produtos afetados

Cap-Go

Referências · 3

• 🔥 https://github.com/Cap-go/capgo/security/advisories/GHSA-854w-xj7g-prv3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-56293 · Nota de Segurança
• https://vulncheck.com/advisories/capgo-stale-cross-organization-authorization-via-incomplete-deploy-history-update-in-transfer-app · Nota