CVE-2026-56222
Last modified
CVE-2026-56222 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. Capgo before 12.128.2 contains an authorization bypass vulnerability in POST /private/role_bindings that fails to verify app_id ownership during app-scoped role binding creation. An attacker with administrative privileges in one organization can create role bindings targeting applications owned by other organizations, enabling unauthorized read and modification of victim applications.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
Capgo before 12.128.2 contains an authorization bypass vulnerability in POST /private/role_bindings that fails to verify app_id ownership during app-scoped role binding creation. An attacker with administrative privileges in one organization can create role bindings targeting applications owned by other organizations, enabling unauthorized read and modification of victim applications.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-56222?
How severe is CVE-2026-56222?
How do I fix CVE-2026-56222?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-56217Capgo before 12.128.2 contains a policy bypass vulnerability…5.3
- CVE-2026-56218Capgo before 12.128.2 fails to strip EXIF metadata including…6.9
- CVE-2026-56219Capgo before 12.128.2 contains a NULL-auth bypass vulnerabil…8.7
- CVE-2026-5622A vulnerability was determined in hcengineering Huly Platfor…3.7
- CVE-2026-56220Capgo before 12.128.2 contains an authorization bypass vulne…7.1
- CVE-2026-56221Cap-go before 12.128.2 contains multiple SQL injection vulne…7.1
- CVE-2026-56223Capgo before 12.128.2 contains a cross-domain SSO account ta…9.3
- CVE-2026-56224Capgo console.capgo.app/login before 12.128.2 accepts access…5.4
- CVE-2026-56225Capgo before 12.128.2 contains an authorization bypass vulne…8.7
- CVE-2026-56226Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase Po…8.7
- CVE-2026-56227Capgo before 12.128.2 contains a server-side request forgery…5.4
- CVE-2026-56228Capgo before 12.128.2 fails to enforce a maximum value on th…6.9
Are you affected by CVE-2026-56222?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST