CVE-2026-53868

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2

Description A denial of service issue exists where attackers can register accounts using arbitrary email addresses without verification. By initiating the deletion process for these accounts, attackers can lock those email addresses in a pending deletion state. This allows attackers to permanently prevent legitimate users from accessing the platform for 30 days by exploiting unverified email ownership during account lifecycle operations.

Recommendations Update to version 12.128.2.