CVE-2026-56293— Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()
Possible ATT&CK Techniques 1AI
T1528 · Steal Application Access TokenGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56293
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Capgo - Stale Cross-Organization Authorization via Incomplete deploy_history Update in transfer_app()
Source: NVD (National Vulnerability Database)
Vulnerability Description
Capgo before 12.128.2 contains an authorization flaw in transfer_app() that fails to update deploy_history.owner_org when transferring applications between organizations. Attackers can exploit this omission to retain unauthorized access to deployment history records in the source organization or cause the destination organization to lose access to transferred application deployment records.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制不恰当
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-56293
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-56293
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-56293 (1)
Other References for CVE-2026-56293 (1)
Same Patch Batch · Capgo · 2026-07-08 · 7 CVEs total
| CVE-2026-56246 | 8.1 HIGH | Capgo - Cross-Organization Authorization Bypass via Scoped API Key Privilege Inheritance |
| CVE-2026-56250 | 7.5 HIGH | Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions |
| CVE-2026-56220 | 6.5 MEDIUM | Capgo - Unauthorized Manifest Insertion via Read-Only Org Member |
| CVE-2026-56283 | 5.4 MEDIUM | Capgo - HTML Injection Leading to Open Redirection in Organization Settings |
| CVE-2026-56298 | 4.3 MEDIUM | Capgo - EXIF Metadata Exposure in App Information Image Upload |
| CVE-2026-56217 | 4.3 MEDIUM | Capgo - Encrypted Bundle Policy Bypass via Direct PostgREST Update |
IV. Related Vulnerabilities
Same product: Capgo
- CVE-2026-56298
Capgo - EXIF Metadata Exposure in App Information Image Uplo - CVE-2026-56284
Capgo - Unauthenticated Metrics Disclosure via get_total_met - CVE-2026-56283
Capgo - HTML Injection Leading to Open Redirection in Organi - CVE-2026-56250
Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in - CVE-2026-56246
Capgo - Cross-Organization Authorization Bypass via Scoped A
Same vendor: Capgo
- CVE-2026-56298
Capgo - EXIF Metadata Exposure in App Information Image Uplo - CVE-2026-56283
Capgo - HTML Injection Leading to Open Redirection in Organi - CVE-2026-56250
Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in - CVE-2026-56246
Capgo - Cross-Organization Authorization Bypass via Scoped A - CVE-2026-56220
Capgo - Unauthorized Manifest Insertion via Read-Only Org Me
Same weakness: CWE-285
- CVE-2026-58252
NATS Server: Subscribe Authz Bypass via Wildcard-Overlap - CVE-2026-58251
NATS Server: Queue Subscribe Authz Bypass - CVE-2026-56246
Capgo - Cross-Organization Authorization Bypass via Scoped A - CVE-2026-55428
Coder: Route hijacking through lack of validation of agent-s - CVE-2026-55077
Coder: User-admin role can reset owner account password
V. Comments for CVE-2026-56293
No comments yet