CVE-2026-34932

CriticalCVSS 9.3

Published: 02/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Hoppscotch prior to version 2026.3.0 has a stored XSS vulnerability that can lead to CSRF.

Risk Assessment

An attacker can steal user sessions, modify data, or perform unauthorized actions in the victim's context.

Recommendation

Update to version 2026.3.0 or later.

Original NVD description (English source)

hoppscotch is an open source API development ecosystem. Prior to version 2026.3.0, there is a stored XSS vulnerability that can lead to CSRF. This issue has been patched in version 2026.3.0.