THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-69189 (HIGH 7.6) — Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, globalEnvironments, and settings GraphQL paths expose another workspace member's private User data,

[NVD] CVE-2026-69189 (HIGH 7.6) — Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, globalEnvironments, and settings GraphQL paths expose another workspace member's private User data,

mednvdPublished 2026-08-18

CVE-2026-69189 CVSS: 7.6 HIGH Published: 2026-08-18T15:17:00.930

Hoppscotch is an open source API development ecosystem. Prior to 2026.6.0, the team, teamMembers.user, RESTHistory, GQLHistory, currentRESTSession, currentGQLSession, environments, globalEnvironments, and settings GraphQL paths expose another workspace member's private User data, while toggleHistoryStarStatus and removeRequestFromHi

Indicators of compromise

CVE-2026-69189cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-69189