CVE-2026-56302 — Capgo - Unsecured Supabase Images Bucket via Missing Row Level Security
Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and delete stored app icon…
Published: 2026-06-24 · CVSS: 6.9 · CVSS 4.0
Capgo before 12.128.2 contains an unsecured images bucket lacking any row level security controls, allowing unauthenticated attackers to read, insert, and delete stored app icons. Remote attackers can exploit this misconfiguration to delete all icons and leak sensitive app IDs and user IDs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7