Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:cap_go:capgo_app:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authorization Bypass in capgo.app via Channel Permission Overrides

A vulnerability in capgo.app allows authenticated administrators to bypass organization boundaries by assigning channel-specific permissions to arbitrary external user UUIDs.

capgo.app +1 authorization-bypass cloud-security privilege-escalation vulnerability cloud ota-updates rce exfiltration +1
3t 1c