CVE-2026-67543

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, heym hardens one untrusted-code path but not its sibling. The Python tool executor pythontoolexecutor.py treats user code as untrusted and mandates a Docker sandbox no...