GHSA-phvp-mxhx-w4fpHighCVSS 6.5

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that...

Published
June 21, 2026
Last Modified
June 21, 2026

🔗 CVE IDs covered (1)

📋 Description

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users to elevate privileges from admin to super_admin. Attackers can exploit the insufficient RLS enforcement to gain unauthorized super_admin access and compromise system security.

🔗 References (4)