Threats tagged 'ghsa-v7q8-55qw-h6hr'

Capgo versions before 12.128.2 have a privilege escalation vulnerability where users demoted from super_admin roles retain access to certain RPCs due to stale user rights not being cleared. This allows attackers to enumerate and delete non-compliant bundles across the organization indefinitely.