Capgo prior to version 12.128.2 has an authorization bypass that allows organization members with a read‑only role to perform INSERT operations on the public.manifest table. These members can supply arbitrary s3_path values that are later retrieved by devices through the unauthenticated /updates endpoint. The result is OTA metadata poisoning and the potential delivery of malicious assets to end‑devices, representing a CWE‑863 weakness in the system’s access controls.

All Capgo deployments running a version earlier than 12.128.2 are affected. The vulnerability activates whenever an organization contains a user assigned the read‑only role that still holds permission to insert rows into the public.manifest table; this applies to every release prior to the 12.128.2 patch regardless of additional features or configuration choices.

The CVSS score of 7.1 indicates moderate‑to‑high severity, while the EPSS score of less than 1% reflects a very low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires only an authenticated request from a read‑only organization member—a role that frequently exists in applications. The attacker can then inject malicious manifest entries, and because the /updates endpoint is unauthenticated, the poisoned OTA content can reach devices, potentially compromising device integrity and availability. The likely attack vector is an authenticated API request by a compromised or malicious read‑only member, followed by unauthenticated distribution of poisoned OTA manifests to devices.