CVE-2026-100612 | Cap-go Capgo up to 12.261.0 SSO Provider Configuration enforce_sso_provider_client_update_guard provider_id privileges management

September 26, 2026 Yanac

A vulnerability marked as problematic has been reported in Cap-go Capgo up to 12.261.0. This impacts the function enforce_sso_provider_client_update_guard of the file 20260826100000_sso_providers_block_direct_active_insert.sql of the component SSO Provider Configuration. This manipulation of the argument provider_id causes improper privilege management.

This vulnerability is tracked as CVE-2026-100612. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More