capacitor-updater

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

capacitor-updater records in CISA KEV

No capacitor-updater vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-40619 CVE-2026-56254 · GHSA-v24w-qp6p-4wjw

capacitor-updater - End-to-End Encryption Bypass via Private Key Distribution

LOW 35

In @capgo/capacitor-updater (Cap-go/capgo) before 12.128.2, the end-to-end encryption scheme distributes the private key to each device that downloads the app.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00195 Published 2026-07-10 Fixed in 12.128.2 CWE-320

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0