Cap-go capgo versions prior to 12.128.2 have an improper authentication vulnerability related to the Enforce Password Policy feature. When a Super Admin enables this policy and changes their password to a compliant one, the backend fails to update the compliance state. Consequently, the system treats the Super Admin account as non-compliant and repeatedly demands password resets, resulting in a denial of service condition by locking the Super Admin out of the organization despite valid credentials.

The vulnerability causes a denial of service for Super Admin accounts by locking them out of organization access. This occurs even though the Super Admin has authenticated successfully and changed their password to meet policy requirements. The persistent password-reset prompts prevent administrative access, potentially disrupting organizational management and operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should monitor vendor communications for updates. No specific workaround or temporary fix is documented in the provided information.