App ID Confusion Vulnerability in Capgo Product by Capgo
CVE-2026-56325

2.3LOW

Key Information:

Vendor

Capgo

Status
Capgo
Vendor
CVE Published:
20 June 2026

What is CVE-2026-56325?

The vulnerability in Capgo arises from the use of ILIKE pattern matching for app_id lookups in the preview subdomain resolver. This allows underscore characters in app_id to function as SQL wildcards, potentially leading to unintended matches between app_ids that differ only by one character at positions where underscores appear. As a result, this can disrupt the preview functionality for legitimate applications and cause confusion between app_ids, posing security risks for users relying on precise app identification.

Affected Version(s)

Capgo 0 < 12.128.2

Capgo 12.128.2

References

https://github.com/Cap-go/capgo/security/advisories/GHSA-...
vendor-advisory
https://www.vulncheck.com/advisories/capgo-app-id-confusi...
third-party-advisory

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Judel777
.