CVE-2026-56333

Name of the Vulnerable Software and Affected Versions Capgo versions prior to 12.128.2

Description Authenticated organization administrators can bypass server-side validation within organization security settings to persist an invalid security policy state. This is achieved by directly updating the public.orgs table from the browser, which circumvents field-level validation checks for security-sensitive configuration parameters, such as max apikey expiration days.

Recommendations Update to version 12.128.2 or later.