Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:12:46 +0000 CVE-2026-56236 — Capgo CLI - Arbitrary File Overwrite via Symlink-Following in Local Credential Operations https://cve.radiocsirt.org/vuln/cve-2026-56236 <p><strong>Affected:</strong> capgo cli</p> <p>Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create malicious symlinks in repositories to overwrite arbitrary files or expose credentials with world-readable permissions when developers run the CLI.</p> <p><strong>Affected:</strong> capgo cli</p> <p>Capgo CLI before 12.128.2 contains arbitrary file overwrite vulnerabilities in login and build credentials operations that follow symlinks without validation. Attackers can create malicious symlinks in repositories to overwrite arbitrary files or expose credentials with world-readable permissions when developers run the CLI.</p> https://cve.radiocsirt.org/vuln/cve-2026-56236