CVE-2023-40299

2023-10-0400:00:00

mitre

github.com

kong insomnia

macos

code execution

vulnerability

dyld_insert_libraries

tcc permissions

AI Score

7.3

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:kong_insomnia:macos:*:*:*:*:*:*:*:*"
    ],
    "vendor": "kong_insomnia",
    "product": "macos",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "*",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]