NangoHQ Nango

• CVE-2026-102596 Medium 4.3 Nango: Production flow RBAC bypass on private flow-read routes 0.3%
• CVE-2026-92804 High 7.1 Nango through 0.70.4 Server-Side Request Forgery via Configuration 0.4%
• CVE-2026-9317 High 8.1 Nango < 0.71.6 Missing Authentication RCE via runner tRPC server 1.3%