Cap vulnerabilities
We track 1 vulnerability in Cap products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 7, 2026.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Cap vulnerabilities
- 7.1 High severity
Cap: Missing Authorization
Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content