CVE-2026-56303— Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function
Possible ATT&CK Techniques 1AI
T1005 · Data from Local SystemGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-56303
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function
Source: NVD (National Vulnerability Database)
Vulnerability Description
Capgo before 12.128.2 contains an information disclosure vulnerability in the find_apikey_by_value PostgreSQL function marked SECURITY DEFINER and executable by the anon role. Unauthenticated attackers can call this function via the /rest/v1/rpc/find_apikey_by_value endpoint to retrieve sensitive API key metadata including user_id, mode, org scoping, and expiration details when supplied a valid key value.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
信息暴露
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-56303
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
Qwen3.6-35B-A3B · 9225 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-56303
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-56303 (2)
IV. Related Vulnerabilities
Same product: Capgo
- CVE-2026-56296
Cap-go - App Existence Oracle via Unauthenticated transfer_a - CVE-2026-56240
Capgo - Billing Authorization Bypass via Exhausted Usage Cre - CVE-2026-56335
Capgo - Channel Configuration Mutation via Write-Scoped API - CVE-2026-56329
Capgo - Cross-Tenant Preview Namespace Collision via Non-Bij - CVE-2026-56312
Capgo - Account Creation Before CAPTCHA Validation in accept
Same vendor: Capgo
- CVE-2026-56240
Capgo - Billing Authorization Bypass via Exhausted Usage Cre - CVE-2026-56335
Capgo - Channel Configuration Mutation via Write-Scoped API - CVE-2026-56329
Capgo - Cross-Tenant Preview Namespace Collision via Non-Bij - CVE-2026-56312
Capgo - Account Creation Before CAPTCHA Validation in accept - CVE-2026-56309
Capgo - Plan Bypass via Unrestricted Attachment Upload Endpo
Same weakness: CWE-200
- CVE-2026-61454
Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__ - CVE-2026-61426
PraisonAI before 1.7.3 Unauthenticated Agent Access via Inse - CVE-2026-6801
Context Blog <= 1.3.5 - Unauthenticated Sensitive Informatio - CVE-2026-10865
Cost Calculator Builder <= 4.0.11 - Unauthenticated Sensitiv - CVE-2026-7544
Mux Video Uploader <= 1.1.4 - Authenticated (Subscriber+) In
V. Comments for CVE-2026-56303
No comments yet