CVE-2026-53867
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
4.3 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Description
Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-459
Source
NVD
Vendor
Cap-go
Product
capgo
Discussion (0)
Add Comment
No comments yet. Be the first!