Capgo

Company

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

September 27, 2026

Last Seen

September 27, 2026

Overview

Recent Events

Relationships

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Related Clusters (1)

Capgo Build Upload Proxy Vulnerability CVE-2026-100625 Disclosed

3h ago·3 sources

Related Articles (2)

Capgo Build Upload Proxy Authorization Bypass via TUS ResourceCapgo (capgo.ap... CVE: New / 1d Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that authorizes a caller against a single build job identified by the supplied builder...

cve.threatint.com·3h ago

CVE-2026-100625 CVE Vulnerability Disclosures / 1d Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that authorizes a caller against a single build job identified by the supplied builder_job_id and validates only that job's stored upload_path, but then forwards the user-controlled TUS resource suffix taken from /build/upload/:jobId/* to the builder service while injecting Capgo's privileged builder API key. Because the forwarded suffi

cve.report·3h ago

Related Entities

CVE-2026-100625 Supabase