Skip to content
OpenAdvisories

Product · nhost

cli

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-47671

    Nhost CLI local configserver allows cross-origin unauthenticated read/write access to local development configuration and secrets

    Nhost is an open source Firebase alternative with GraphQL. In versions of Nhost CLI prior to 1.46.0, the hidden `nhost configserver` used by `nhost dev` exposes the Mimir GraphQL API with dummy authorization directives and permissive CORS. When a developer is…

    nhost cli github.com/nhost/nhost Go