CVE-2023-40299

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p29

Published

Oct 4, 2023 (Oct 4, 2023)

Modified

Jun 17, 2026

Description

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.

Vendors: konghq
Products: insomnia
Weakness: CWE-114
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.