agentprime: cap-go-capgo-appEvery new CVE for cap-go-capgo-app.https://agentprime.io/CVE-2026-100626: capgo through 12.128.2 IDOR via PUT /app icon endpointhttps://agentprime.io/advisories/CVE-2026-100626/https://agentprime.io/advisories/CVE-2026-100626/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:27:39 GMTCVECVE-2026-100629: Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCHhttps://agentprime.io/advisories/CVE-2026-100629/https://agentprime.io/advisories/CVE-2026-100629/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:05 GMTCVECVE-2026-100628: capgo.app before 12.128.12 Authentication Bypass via apikeyhttps://agentprime.io/advisories/CVE-2026-100628/https://agentprime.io/advisories/CVE-2026-100628/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:05 GMTCVECVE-2026-100627: Capgo bundle promotion API channel RBAC deny override bypasshttps://agentprime.io/advisories/CVE-2026-100627/https://agentprime.io/advisories/CVE-2026-100627/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:04 GMTCVECVE-2026-100625: Capgo Build Upload Proxy Authorization Bypass via TUS Resourcehttps://agentprime.io/advisories/CVE-2026-100625/https://agentprime.io/advisories/CVE-2026-100625/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:03 GMTCVECVE-2026-100624: Capgo.app before 12.264.5 Upload Expiry Bypass via build uploadhttps://agentprime.io/advisories/CVE-2026-100624/https://agentprime.io/advisories/CVE-2026-100624/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:02 GMTCVECVE-2026-100623: Capgo Authentication Bypass via Direct PostgREST org_users Table Writehttps://agentprime.io/advisories/CVE-2026-100623/https://agentprime.io/advisories/CVE-2026-100623/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:01 GMTCVECVE-2026-100622: capgo.app through 12.129.0 Cache Restoration of Deleted Bundleshttps://agentprime.io/advisories/CVE-2026-100622/https://agentprime.io/advisories/CVE-2026-100622/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:00 GMTCVECVE-2026-100621: capgo.app Content-Lock Bypass via r2-direct Bundle Mutationhttps://agentprime.io/advisories/CVE-2026-100621/https://agentprime.io/advisories/CVE-2026-100621/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:00 GMTCVECVE-2026-100619: Capgo OTA Manifest Poisoning via app_versions.manifest Bypasshttps://agentprime.io/advisories/CVE-2026-100619/https://agentprime.io/advisories/CVE-2026-100619/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:58 GMTCVECVE-2026-100618: Capgo App Icon Update Privilege Escalation via Service-Role Workerhttps://agentprime.io/advisories/CVE-2026-100618/https://agentprime.io/advisories/CVE-2026-100618/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:58 GMTCVECVE-2026-100617: Cap-go capgo.app Authorization Bypass via channel_permission_overrideshttps://agentprime.io/advisories/CVE-2026-100617/https://agentprime.io/advisories/CVE-2026-100617/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:57 GMTCVECVE-2026-100616: capgo.app Authentication Bypass via PostgREST customer_id Mutationhttps://agentprime.io/advisories/CVE-2026-100616/https://agentprime.io/advisories/CVE-2026-100616/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:56 GMTCVECVE-2026-100615: Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotationhttps://agentprime.io/advisories/CVE-2026-100615/https://agentprime.io/advisories/CVE-2026-100615/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:56 GMTCVECVE-2026-100614: Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Workerhttps://agentprime.io/advisories/CVE-2026-100614/https://agentprime.io/advisories/CVE-2026-100614/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:55 GMTCVECVE-2026-100613: capgo.app Authorization Bypass via Stale Channel Permission Overrideshttps://agentprime.io/advisories/CVE-2026-100613/https://agentprime.io/advisories/CVE-2026-100613/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:54 GMTCVECVE-2026-100612: Capgo SSO Provider ID Authentication Bypass via Incomplete Migrationhttps://agentprime.io/advisories/CVE-2026-100612/https://agentprime.io/advisories/CVE-2026-100612/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:53 GMTCVECVE-2026-100611: Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-listhttps://agentprime.io/advisories/CVE-2026-100611/https://agentprime.io/advisories/CVE-2026-100611/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:22:53 GMTCVECVE-2026-88864: Capgo SSO Provider Authentication Bypass via PostgREST Direct Writehttps://agentprime.io/advisories/CVE-2026-88864/https://agentprime.io/advisories/CVE-2026-88864/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:20 GMTCVEcriticalCVE-2026-88863: capgo.app through 12.207.1 Privilege Escalation via invite_new_user_to_orghttps://agentprime.io/advisories/CVE-2026-88863/https://agentprime.io/advisories/CVE-2026-88863/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:19 GMTCVECVE-2026-88862: Capgo API Key Manager Authentication Bypass via x-limited-key-idhttps://agentprime.io/advisories/CVE-2026-88862/https://agentprime.io/advisories/CVE-2026-88862/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:19 GMTCVECVE-2026-88861: Capgo AAL1 Session MFA Bypass via Direct RBAC Authorizationhttps://agentprime.io/advisories/CVE-2026-88861/https://agentprime.io/advisories/CVE-2026-88861/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:18 GMTCVECVE-2026-88860: Capgo Authorization Bypass via Stale Channel Permission Overrideshttps://agentprime.io/advisories/CVE-2026-88860/https://agentprime.io/advisories/CVE-2026-88860/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:05:17 GMTCVEcritical