PT-2026-51144 · Cap Go · Cap-Go

Judel777 · Published 2026-06-20 · Updated 2026-06-20 · CVE-2026-56325

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2

Description The preview subdomain resolver uses ILIKE pattern matching instead of exact matching for app id lookup. This allows underscore characters within the app id to function as SQL wildcards. An attacker can create applications with app id values that differ by only one character at the underscore positions, leading to unintended pattern matches. This can result in the disruption of preview functionality for legitimate applications or cause confusion regarding the app id.

Recommendations Update to version 12.128.2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-56325

Affected Products

Cap-Go

References · 4

• https://github.com/Cap-go/capgo/security/advisories/GHSA-cw88-ch2j-8vqj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-56325 · Security Note
• https://vulncheck.com/advisories/capgo-app-id-confusion-via-ilike-wildcard-in-preview-subdomain-lookup · Note
• https://twitter.com/VulmonFeeds/status/2068413757731013069 · Twitter Post