MEDIUMVulnerability

CVE-2026-88860

Capgo fails to clean up channel permission overrides when a user's last organization role binding is deleted, leaving stale overrides active. Attackers can retain channel-specific permissions after their base RBAC access has been revoked to perform unauthorized actions like changing production OTA versions.

Properties

severity
MEDIUM
score
6.3
cve_id
CVE-2026-88860
signal_observed_at
2026-09-18T21:50:45+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
published_at
2026-09-10T14:17:11.527
last_modified
2026-09-18T18:17:35.817

Related Entities (2)

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (1)

[Weakness]Incorrect Authorization

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-88860 — Ninja Signal Threat Intelligence | Ninja Signal