Cap Go · Cap-Go · CVE-2026-56218
**Name of the Vulnerable Software and Affected Versions**
Capgo versions prior to 12.128.2
**Description**
The software fails to strip EXIF metadata, which includes GPS geolocation data, from uploaded images. This leads to information disclosure, as attackers can download these images and extract precise latitude and longitude coordinates to reveal the physical location of the user at the time the image was captured.
**Recommendations**
Update to version 12.128.2 or later.