CVE-2026-67541

Prior to version 0.0.70 , Heym (an agentic systems and business-process automation platform) contained a logic flaw where team-member management (add, remove, update) was gated only on team membership rather than requiring a team creator or admin role. Because the TeamMember object lacks a role c...