CVE-2026-100616 capgo.app Authentication Bypass via PostgREST customer_id Mutation

capgo.app is an over-the-air update platform for Capacitor apps. In all versions prior to a fix, the row-level security UPDATE policy on the public.orgs table permits an organization admin a user holding org.updatesettings to update the entire row, including the internal billing pointer column...