CVE-2026-56251General

LOWCVSS 7.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Capgo before 12.128.2 contains a broken row level security policy in the org_users table that allows authenticated users to elevate privileges from admin to super_admin. Attackers can exploit the insufficient RLS enforcement to gain unauthorized super_admin access and compromise system security.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-266

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56251

Full discourse1 post

Vulmon Vulnerability Feed@VulmonFeeds91d
General
CVE-2026-56251 Privilege Escalation in Capgo Before 12.128.2 via Broken Row Level Security https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56251
Post summary
The entry notes a privilege‑escalation flaw in Capgo versions prior to 12.128.2 caused by broken row‑level security, but provides no proof‑of‑concept, exploit code, patch, or evidence of active exploitation.
0000099
4.1K followersView on X

Explore more

Back to dashboard