CVE-2026-56255

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2

Description A denial of service issue exists in the 'POST /app/demo' endpoint. Authenticated users with organization write permissions can create an unlimited number of demo applications because the system lacks rate limiting or quota enforcement. Each request to this endpoint generates approximately 138 database write operations, which can lead to degraded performance, increased operational costs, and service instability.

Recommendations Update to version 12.128.2 or later. Restrict access to the 'POST /app/demo' endpoint to minimize the risk of exploitation.