CVE-2026-56298 — Capgo - EXIF Metadata Exposure in App Information Image Upload
Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can upload images contai…
Published: 2026-07-08 · CVSS: 5.3 · CVSS 4.0
Capgo before 12.128.2 fails to strip EXIF metadata from images uploaded via the app information endpoint, exposing sensitive geolocation data. Attackers can upload images containing EXIF metadata to extract geographic location information and other embedded metadata from uploaded files.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7