Skip to content
Threat Feed
Subscribe

Product

Capgo.app (All Versions)

2 briefs RSS
high advisory

Authorization Flaw in Capgo App Icon Update Path

An authorization vulnerability in the Capgo PUT /app/:id endpoint allows authenticated users to trick a privileged backend worker into overwriting restricted storage objects.

capgo.app web-application privilege-escalation cloud
1t 1c
high advisory

CVE-2026-88864 - Authorization Bypass in Capgo SSO Provisioning

An authorization vulnerability in the public.sso_providers table of Capgo allows attackers with an ordinary API key to bypass domain verification and enforce arbitrary SSO settings, leading to authentication disruption.

capgo.app sso-bypass cloud-security api-security
1t 1c