CVE-2026-56236: Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operations
Published Jun 21, 2026
·Updated
Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create malicious symlinks in repositories to overwrite arbitrary files or expose credentials with world-readable permissions when developers run the CLI.
Affected Software
1 affected component
Capgo Capgo CLI<12.128.2
Event History
Jun 21, 2026
CVE Published
via MITRE·01:26 PM
Data Sourced
via MITRE·01:26 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-56236?
CVE-2026-56236 has a medium severity rating of 6.1.
2
How do I fix CVE-2026-56236?
To mitigate CVE-2026-56236, update the Capgo CLI to version 12.128.2 or later.
3
What types of operations are affected by CVE-2026-56236?
CVE-2026-56236 affects login and build credential operations in Capgo CLI.
4
What is the risk associated with CVE-2026-56236?
CVE-2026-56236 carries a risk score of 41, indicating a potential for arbitrary file overwrites.
5
Can CVE-2026-56236 expose sensitive information?
Yes, CVE-2026-56236 can expose credentials through world-readable permissions.