CVE-2026-56233
Capgo - SSRF and Privilege Escalation via Path Traversal in Builder Upload Proxy
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
0th
Capgo before 12.128.2 contains a path traversal vulnerability in the builder upload proxy that allows authenticated users with build permissions to bypass upload restrictions. Attackers can append traversal sequences to the upload path, which are normalized by the WHATWG URL parser, enabling access to internal administrative endpoints with the privileged BUILDER_API_KEY header and resulting in server-side privilege escalation.
| CWE | CWE-22 |
| Vendor | capgo |
| Product | capgo |
| Published | Jun 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for capgo capgo
Be the first to know when new high vulnerabilities affecting capgo capgo are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low
Affected Versions
Capgo / Capgo
0 < 12.128.2
References
Credits
🔍 hunt-with-4bh1