CVE-2023-40299: Konghq Insomnia

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable.

Affected products

• Konghq Insomnia: version 2023.4.0 only

Published 2023-10-04. Last modified 2026-06-17.