Judel777

Capgo Authorization Bypass via Stale Channel Permission Overrides

Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization

Capgo SSO Provider Authentication Bypass via PostgREST Direct Write

Capgo API Key Manager Authentication Bypass via x-limited-key-id

Capgo - Unauthenticated Organization Existence Enumeration via rescind_invitation RPC

Capgo - RBAC Demotion Privilege Retention via Stale org_users.user_right

Capgo - Billing Authorization Bypass via Exhausted Usage Credits

Capgo - Scope Isolation Failure in Webhook Test Endpoint

Capgo - Unauthenticated API Key Metadata Disclosure via SECURITY DEFINER RPC Function

Capgo - Cross-Organization Account Disruption via SSO Prelink Endpoint