Unprotected Legacy Table Access via PostgREST Exposure

Capgo (capgo.app) exposes the legacy membership table public.org_users directly through Supabase PostgREST. The table's row-level security policies "Allow org admin to insert" and "Allow org admin to update" only verify that the caller has admin rights in the target organization (public.check_min_rights('admin', ...)); they do not require a pending invitation in tmp_users, acceptance of an invite token via /private/accept_invitation, any action by the target user, or the membership/role-consistency and anti-escalation checks enforced by the RBAC role-binding path. As a result, an authenticated user who is an admin of an organization can INSERT or UPDATE org_users rows directly to add any existing public.users account as an active member of that organization with user_right="admin", bypassing the invitation and role-assignment workflow entirely. In testing, an account with no prior access to the organization or its apps could, after such a direct insert, read the organization and app an

Casky was already ahead

This CVE exploits attack patterns that Casky's 283matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.

Analysis

Capgo's exposure of the public.org_users legacy membership table through Supabase PostgREST creates a critical authorization bypass vulnerability. The platform's row-level security policies fail to enforce proper invitation workflows, allowing attackers with knowledge of an organization ID to directly insert or modify membership records by simply possessing admin rights in the target organization—bypassing the intended invite acceptance mechanism entirely. This affects any Capgo user whose organization data can be accessed, potentially compromising multi-tenant isolation and enabling unauthorized privilege escalation or lateral movement within organizations.

Casky's 283 mapped security skills detect the attack patterns underlying this vulnerability by analyzing both MITRE ATT&CK techniques TA0004 (Privilege Escalation) and TA0006 (Credential Access). Using Claude AI's extended reasoning, practitioners would identify findings centered on: (1) unauthorized modification of access control objects (CWE-863 authorization scope bypass), (2) direct API manipulation of membership tables without completing invitation workflows, and (3) exploitation of incomplete row-level security policies that trust only organization context rather than transaction state. Practitioners would see alerts flagging API calls that bypass /private/accept_invitation endpoints, direct INSERT/UPDATE operations on org_users with mismatched invitation status in tmp_users, and privilege grants occurring without corresponding user acknowledgment—enabling rapid detection of both reconnaissance and active exploitation attempts.

Live Threat IntelligenceComing soon

Casky Risk Score

—

EPSS Probability

—

Shodan Exposure

—

GreyNoise Signal

—

Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →

283 Casky skills cover this attack pattern

These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-100623.

abusing-dpapi-for-credential-access

red teaming · high

Run

abusing-shadow-credentials-for-privesc

red teaming · high

Run

Access with Stolen Session Cookie

identity access management · low

Run

MITRE ATT&CK Techniques

TA0004 TA0006

Investigate the attack patterns behind CVE-2026-100623

Casky has 283 skills that investigate the attack patterns behind CVE-2026-100623. Run one and get CVSS-scored findings in 3 minutes.

Run the skill that detects this →

X Instagram LinkedIn