NangoHQ

Products

ProductCVEsExploitedLatest
Nango3–Oct 12, 2026

Exploited and recent CVEs

  • CVE-2026-102596 Medium 4.3 Nango: Production flow RBAC bypass on private flow-read routes 0.3%
  • CVE-2026-92804 High 7.1 Nango through 0.70.4 Server-Side Request Forgery via Configuration 0.4%
  • CVE-2026-9317 High 8.1 Nango < 0.71.6 Missing Authentication RCE via runner tRPC server 1.3%