Skip to content
OpenAdvisories

Vendor

Cap-go

42 known vulnerabilities.

Products

capgo.app 23 capgo 17 Cap-go 1 @capgo/cli 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-88861 Public exploit

    Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization

    Capgo (Cap-go/capgo.app) contains an authentication bypass affecting all versions (no patched version available at time of publication). The Edge authorization path allows a password-only Supabase aal1 session to exercise privileged RBAC permissions even when…

    Cap-go capgo.app