CVE-2026-56251: Capgo - Privilege Escalation via Broken Row Level Security in org_users
Capgo before 12.128.2 contains a broken row level security policy in the orgusers table that allows authenticated users to elevate privileges from admin to superadmin. Attackers can exploit the insufficient RLS enforcement to gain unauthorized superadmin access and compromise system security.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56251?
CVE-2026-56251 is rated with a medium severity score of 6.5.
How does CVE-2026-56251 impact Capgo users?
CVE-2026-56251 allows authenticated users to escalate their privileges from admin to super_admin, compromising system security.
What versions of Capgo are affected by CVE-2026-56251?
CVE-2026-56251 affects Capgo versions prior to 12.128.2.
How can I mitigate the risks associated with CVE-2026-56251?
To mitigate CVE-2026-56251, update Capgo to version 12.128.2 or later, which contains a fix for the broken row level security policy.
Who is at risk due to CVE-2026-56251?
Authenticated users of Capgo who have access to the org_users table are at risk of privilege escalation due to CVE-2026-56251.