Vulnerabilities CVE-2026-53867

CVE-2026-53867

Medium

Open

TLP:CLEAR

Capgo < 12.128.2 - Orphaned File Retention via Profile Image Replacement

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Capgo before 12.128.2 fails to delete previously uploaded profile images from backend storage when users replace or remove them. Attackers can access orphaned image files through previously generated URLs, allowing unauthorized retrieval of user-uploaded content.

Details

CVSS Score: 5.3
EPSS Score ⓘ: 0.18%

8.2th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jun 12, 2026
Last Modified: Jul 14, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.