HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-56232 — Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps const...

·Source: NIST NVD

Updated:

Executive Summary

Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps constraints on subkeys provided via x-limited-key-id header in middlewareKey function. Attackers can bypass subkey scope restrictions by referencing their own subkeys, causing all downstream route handlers to use the unrestricted parent key instead of the scoped subkey.

Analysis

Capgo before 12.128.2 fails to enforce limited_to_orgs and limited_to_apps constraints on subkeys provided via x-limited-key-id header in middlewareKey function. Attackers can bypass subkey scope restrictions by referencing their own subkeys, causing all downstream route handlers to use the unrestricted parent key instead of the scoped subkey. CVSS Score: 8.8. Published: 2026-06-24T13:16:33.327.

Indicators of Compromise (1)

CVE (1)
CVE-2026-56232
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jun 24, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Digital Prime Technologies expands Tokenet to BitGo Bank & Trust

Digital Prime Technologies, a provider of digital asset technology solutions and developer of Tokenet, today announced the completion of Tokenet's integration with BitGo Bank & Trust, National Association ("BitGo Bank & Trust"), an OCC-regulated digital asset trust bank and subsidiary of BitGo Holdings, Inc. (NYSE: BTGO) ("BitGo"), the digital asset infrastructure company.

Finextra
MEDIUMVulnerabilityNEW

Big payment names back new stablecoin

Visa, Mastercard, US Bank, Google and Coinbase are among dozens of firms backing Open USD, a new stablecoin slated to launch later this year.

Finextra
MEDIUMVulnerability

House passes kids’ online safety bill, but Senate approval unlikely

The Kids Internet and Digital Safety (KIDS) Act passed with bipartisan support by a 267-117 margin, winning the two-thirds majority needed to greenlight the legislation under a process that speeds up a bill’s path to a vote but requires more than a simple majority.

The Record