CVE-2025-1087 — Arbitrary Code Execution in Kong Insomnia Desktop Application
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insu…
Published: 2025-05-09 · CVSS: 9.3 · CVSS 4.0
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7