What’s Vulnerable › Products

nhost cli vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your nhost cli version is affected

Latest nhost cli vulnerabilities

• CVE-2026-47671 — Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets (CVSS 5.4)
• CVE-2026-34200 — Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port (CVSS 7.5)