CVE-2026-88862 | Cap-go Capgo up to 12.242.4 RBAC Middleware hono_middleware.ts privileges management

September 10, 2026 Yanac

A vulnerability was found in Cap-go Capgo up to 12.242.4 and classified as critical. This vulnerability affects the function checkKeyByIdPg/hasLimitedRbacSubkeyScope/validateSubkeyUser of the file supabase/functions/_backend/utils/hono_middleware.ts of the component RBAC Middleware. The manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-88862. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More