CVE-2026-100614

Capgo versions before 12.244.1 are vulnerable to a cross-tenant integrity issue within the metadata-cleaning worker . The root cause is that the worker trusts image object keys from mutable database rows without performing ownership validation. An authenticated attacker can exploit this by insert...