CVE-2026-56233: Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload Proxy
Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticated users with build permissions to bypass upload restrictions. Attackers can append traversal sequences to the upload path, which are normalized by the WHATWG URL parser, enabling access to internal administrative endpoints with the privileged BUILDERAPIKEY header and resulting in server-side privilege escalation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Capgo builder upload proxyto a version that resolves this vulnerability.Fixed in 12.128.2 - Compensating control
Ensure only authenticated users with build permissions can access the builder upload proxy to prevent bypassing upload restrictions via path traversal.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56233?
The severity of CVE-2026-56233 is rated high at 8.7.
What are the main risks associated with CVE-2026-56233?
CVE-2026-56233 poses risks of Server-Side Request Forgery (SSRF) and privilege escalation through path traversal.
How do I fix CVE-2026-56233?
To fix CVE-2026-56233, update Capgo to version 12.128.2 or later.
Who is affected by CVE-2026-56233?
Authenticated users with build permissions in Capgo before version 12.128.2 may be affected by CVE-2026-56233.
What type of vulnerability is CVE-2026-56233?
CVE-2026-56233 is categorized as a path traversal vulnerability.