Critical Hoppscotch Flaw Lets Unauthenticated Attackers Overwrite JWT Secrets
Mon Jun 29 2026
IAM
Open Source
Vulnerability
cyberpress.org
A maximum-severity vulnerability has been disclosed in the self-hosted version of Hoppscotch, the widely used open-source API development platform. Tracked as CVE-2026-50160 and carrying a CVSS 3.1 base score of 10.0, the flaw enables unauthenticated attackers to overwrite JWT signing secrets and seize complete control of a target server through a single HTTP request. Hoppscotch […]
The post Critical Hoppscotch Flaw Lets Unauthenticated Attackers Overwrite JWT Secrets appeared first on Cyber Security News.