CVE-2026-59721

7.2 Élevée

Publiée le 09/07/2026 à 20:16 · Modifiée le 10/07/2026 à 21:15 · Analyse NVD reportée · Source : security-advisories@github.com

Description

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the updateInfraConfigs GraphQL mutation in admin/infra.resolver.ts accepts an attacker-controlled MAILER_SMTP_URL value, and validateSMTPUrl in utils.ts permits path, query, or fragment content that nodemailer parses into sendmail transport options, allowing an admin to execute arbitrary commands as root in the backend container after restart and mail sending. This issue is fixed in version 2026.6.0.

Traduire en français

Produits concernés

hoppscotch

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.2 Élevée	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-77
CWE-78
CWE-915

Références

https://github.com/hoppscotch/hoppscotch/commit/73a88c82b1b2cada26cc4b2bc095b54554242239
https://github.com/hoppscotch/hoppscotch/pull/6413
https://github.com/hoppscotch/hoppscotch/releases/tag/2026.6.0
https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-v7q6-r45w-2c6r
https://github.com/hoppscotch/hoppscotch/security/advisories/GHSA-v7q6-r45w-2c6r

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories