CVE-2026-56219Patch

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Capgo before 12.128.2 contains a NULL-auth bypass vulnerability in the public.get_org_user_access_rbac function that allows unauthenticated attackers to retrieve RBAC role bindings and member email addresses. Attackers can exploit improper NULL comparison in the authorization gate to disclose organization membership, roles, and email addresses via the PostgREST RPC endpoint using only a public API key.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Full discourse1 post

DFIR Lab@DFIR_Lab91d
Patch
🚨 HIGH SEVERITY: CVE-2026-56219 (CVSS 7.5) Capgo <12.128.2 NULL-auth bypass exposes RBAC roles & member emails. Unauthenticated attackers can exploit public.get_org_user_access_rbac function. Patch immediately to 12.128.2+ #CVE #Vulnerability #PatchNow https://t.co/Sv41IoA0s2
Post summary
The tweet alerts to a high‑severity null‑auth bypass in Capgo (CVE‑2026‑56219) that exposes RBAC roles and member emails, and urges users to patch to 12.128.2+ immediately.
00000135
56 followersView on X

Explore more

Back to dashboard