CAPEv2 vulnerabilities

1 known vulnerability in CAPEv2 from Kevoreilly. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  CAPEv2: Missing Authorization

  CVE-2026-90768Sep 13, 2026Kevoreilly

  CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. Attackers can enumerate all tasks in the system and delete arbitrary analyses by sending re