Skip to content
OpenAdvisories

Vendor

NangoHQ

4 known vulnerabilities.

Products

nango 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-102596

    Nango: Production flow RBAC bypass on private flow-read routes

    Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with has_rbac=true, two private flow-read routes, GET /api/v1/integrations/:providerConfigKey/flows and GET …

    NangoHQ nango