CVE-2026-67546

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67542

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67546

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

EUVD-2026-124047

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67546 Heym: Command execution via POST /api/mcp/fetch-tools stdio transport: supplied command is spawned before MCP validation

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67546 Heym: Command execution via POST /api/mcp/fetch-tools stdio transport: supplied command is spawned before MCP validation

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67546

The Heym agentic systems and business-process automation platform is vulnerable to arbitrary command execution via the POST /api/mcp/fetch-tools endpoint in versions prior to 0.0.75 . An authenticated user with the lowest role can exploit this by providing a stdio transport , which causes the sys...

EUVD-2026-124043

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67542

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67542 Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transports

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67542 Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transports

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67542

The Heym platform for agentic systems and business-process automations is vulnerable to Server-Side Request Forgery (SSRF) prior to version 0.0.70 . The issue exists in the POST /api/mcp/fetch-tools endpoint, which is accessible to any authenticated user. An attacker can force the application to ...

PT-2026-145529

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67542: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67546: heymrun heym: Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

PT-2026-145533

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...