medium6.5
CVE-2026-56302
Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and dele…
Impact
Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and delete stored app icons. Remote attackers can exploit this misconfiguration to delete all icons and leak sensitive app IDs and user IDs.
Affected products
| Product | Affected versions |
|---|---|
| Capgo | before 12.128.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.