← CVE Intelligence

CVE-2025-1087

Arbitrary Code Execution in Kong Insomnia Desktop Application PUBLISHED

Description (CNA)

Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.

Affected (CNA)

Vendor / productVersions
Kong Inc. / Insomniaaffected n/a through 11.0.2

CWE

CWE-20, CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.