What’s Vulnerable › Vulnerabilities

CVE-2023-40299

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-10-04 · updated 2026-06-17
• Weakness: CWE-114

Description

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.

Affected products

• KongHQ Insomnia: 2023.4.0

References

• https://github.com/Kong/insomnia/pull/6217/commits
• https://github.com/Kong/insomnia/releases
• https://insomnia.rest/changelog
• https://www.angelystor.com/posts/cve-2023-40299/
• https://github.com/Kong/insomnia/pull/6217/commits
• https://github.com/Kong/insomnia/releases
• https://insomnia.rest/changelog
• https://www.angelystor.com/posts/cve-2023-40299/

Get alerted when CVE-2023-40299 or the next vulnerability affects your stack