CVE-2026-34969 — Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the…
Image via opengraph.githubassets.com
🚨 CVE-2026-34969 Nhost is an open source Firebase alternative with GraphQL. Prior to 0.48.0, the auth service's OAuth provider callback flow places the refresh token directly into the redirect URL as a query parameter. Refresh tokens in URLs are logged in browser history, server access logs, HTTP R
What This Means For You
- New vulnerability disclosed — verify if your stack is exposed.
- New tool or resource available — evaluate for your security workflow.
Related ATT&CK Techniques
🛡️ Detection Rules
1 rule · 6 SIEM formats1 detection rule mapped to MITRE ATT&CK. Free Sigma YAML below.
Browser Cookie/Credential Store Access
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-34969 | Information Disclosure | Nhost version prior to 0.48.0, auth service OAuth provider callback flow, refresh token placed as query parameter in redirect URL. |
| CVE-2026-34969 | Information Disclosure | Nhost version prior to 0.48.0, sensitive data (refresh token) leaked via browser history. |
| CVE-2026-34969 | Information Disclosure | Nhost version prior to 0.48.0, sensitive data (refresh token) leaked via server access logs. |
| CVE-2026-34969 | Information Disclosure | Nhost version prior to 0.48.0, sensitive data (refresh token) leaked via HTTP Referer headers. |
| CVE-2026-34969 | Information Disclosure | Nhost version prior to 0.48.0, sensitive data (refresh token) leaked via proxy/CDN logs. |
Source & Attribution
| Source Platform | Telegram |
| Channel | CVE Notify |
| Published | April 07, 2026 at 20:26 UTC |
This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.
Believe this infringes your rights? Submit a takedown request.
Related coverage
Daily Security Digest — 2026-05-22
13 vulnerability disclosures (5 Critical, 8 High) and 14 curated intelligence stories from 6 sources.
Huawei Router Flaw Triggered Telecom Blackout, SecurityWeek Reports
SecurityWeek reports on a critical flaw in Huawei routers that led to a significant telecom blackout. While details are sparse, the incident underscores the inherent...
Ubiquiti Patches Three Max Severity UniFi OS Vulnerabilities
Ubiquiti has rolled out critical security updates addressing three maximum severity vulnerabilities in UniFi OS. BleepingComputer reports these flaws, tracked as CVE-2023-48092, CVE-2023-48093, and CVE-2023-48094,...