EUVD-2026-101756

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's errorworkflowid because the field is missing from OWNERONLYEXECUTIONFIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and...

CVE-2026-110873

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's errorworkflowid because the field is missing from OWNERONLYEXECUTIONFIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and...

CVE-2026-110873 Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's errorworkflowid because the field is missing from OWNERONLYEXECUTIONFIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and...

CVE-2026-110873

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's errorworkflowid because the field is missing from OWNERONLYEXECUTIONFIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and...

CVE-2026-110873 Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's errorworkflowid because the field is missing from OWNERONLYEXECUTIONFIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and...

CVE-2026-110873 Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's errorworkflowid because the field is missing from OWNERONLYEXECUTIONFIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and...

CVE-2026-110873

The Heym application (versions 0.0.55 before 0.0.121) is vulnerable to a privilege escalation flaw due to the error_workflow_id field missing from OWNER_ONLY_EXECUTION_FIELDS . This allows shared collaborators to overwrite a workflow's error ID. By pointing the error workflow to a malicious workf...

CVE-2026-110873: Incorrect Authorization

Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's errorworkflowid because the field is missing from OWNERONLYEXECUTIONFIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and...

PT-2026-114187

Name of the Vulnerable Software and Affected Versions Heym versions 0.0.55 through 0.0.120 Description A privilege escalation issue exists where shared collaborators can overwrite the error workflow id of a workflow. This occurs because the field is missing from OWNER ONLY EXECUTION FIELDS. An...

CVE-2026-55376

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-55376

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-55376 heym Python Tool Sandbox Escape

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

EUVD-2026-98740

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-55376

Prior to version 0.0.40 , the heym platform is vulnerable to a sandbox escape within the backend/app/services/python_tool_executor.py component. An authenticated user capable of creating or editing a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox. The root cause ...

CVE-2026-55376 heym Python Tool Sandbox Escape

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-55376 heym Python Tool Sandbox Escape

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

PT-2026-111642

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.40 Description An authenticated user with permissions to create or edit a workflow using an Agent custom Python tool can bypass the blacklist-based sandbox located in backend/app/services/python tool executor.py. Thi...

CVE-2026-55376: Improper Neutralization of Special Elements used in an OS Command

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-109362

Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or...

CVE-2026-109362 Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens

Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or...