What’s Vulnerable › Products

NangoHQ nango vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your NangoHQ nango version is affected

Latest NangoHQ nango vulnerabilities

• CVE-2026-102596 — Nango: Production flow RBAC bypass on private flow-read routes (CVSS 4.3)
• CVE-2026-92804 — Nango through 0.70.4 Server-Side Request Forgery via Configuration (CVSS 7.1)
• CVE-2026-9317 — Nango < 0.71.6 Missing Authentication RCE via runner tRPC server (CVSS 8.1)