CVE-2026-56236 Details

A vulnerability in Capgo CLI versions prior to 12.128.2 allows for arbitrary file overwrites by following symlinks without proper validation. This issue arises during login and build credentials operations, where the CLI inadvertently overwrites files or exposes sensitive credentials with world-readable permissions. The vulnerability can be exploited by creating malicious symlinks in repositories, which are then followed by the CLI when executed.

Users are advised to update to Capgo CLI version 12.128.2 or later. In addition, it is recommended to validate API keys before writing sensitive files, avoid following symlinks when writing files, use safe file operations that enforce proper permissions, and write files atomically to prevent overwriting issues.