CVE-2026-67546

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67545

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.73, the HTTP workflow node in Heym makes outbound HTTP requests to user-supplied URLs without validation of the target host or IP address. If a workflow author has already...

CVE-2026-67544

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...

CVE-2026-67540

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, getworkflowtemplate / getnodetemplate fetches a template by ID with no visibility / author / sharedwith predicate, so any authenticated user can read and use any other...

CVE-2026-67543

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, heym hardens one untrusted-code path but not its sibling. The Python tool executor pythontoolexecutor.py treats user code as untrusted and mandates a Docker sandbox no...

CVE-2026-67542

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user lowest role; no admin/workflow association and fetches an attacker-supplied URL through the sse and...

CVE-2026-67541

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, team-member management add / remove / update is gated only on team membership, not on the team creator/admin role — and TeamMember has no role column. Any non-creator memb...

EUVD-2026-124047

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67546

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67546 Heym: Command execution via POST /api/mcp/fetch-tools stdio transport: supplied command is spawned before MCP validation

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67546 Heym: Command execution via POST /api/mcp/fetch-tools stdio transport: supplied command is spawned before MCP validation

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint any authenticated user, lowest role also accepts the stdio transport, which spawns the attacker-supplied command with...

CVE-2026-67546

The Heym agentic systems and business-process automation platform is vulnerable to arbitrary command execution via the POST /api/mcp/fetch-tools endpoint in versions prior to 0.0.75 . An authenticated user with the lowest role can exploit this by providing a stdio transport , which causes the sys...

EUVD-2026-124046

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.73, the HTTP workflow node in Heym makes outbound HTTP requests to user-supplied URLs without validation of the target host or IP address. If a workflow author has already...

CVE-2026-67545 Heym: Server-Side Request Forgery (SSRF) in HTTP Workflow Node

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.73, the HTTP workflow node in Heym makes outbound HTTP requests to user-supplied URLs without validation of the target host or IP address. If a workflow author has already...

CVE-2026-67545

Versions of Heym prior to 0.0.73 are vulnerable to a Server-Side Request Forgery (SSRF) in the HTTP workflow node . The root cause is the lack of validation on user-supplied target hosts or IP addresses during outbound HTTP requests. If a workflow author preconfigures an HTTP node to target inter...

CVE-2026-67545 Heym: Server-Side Request Forgery (SSRF) in HTTP Workflow Node

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.73, the HTTP workflow node in Heym makes outbound HTTP requests to user-supplied URLs without validation of the target host or IP address. If a workflow author has already...

CVE-2026-67545

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.73, the HTTP workflow node in Heym makes outbound HTTP requests to user-supplied URLs without validation of the target host or IP address. If a workflow author has already...

EUVD-2026-124045

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...

CVE-2026-67544 Heym: Playwright Custom Code Backend RCE via `playwrightCode` Field

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...

CVE-2026-67544 Heym: Playwright Custom Code Backend RCE via `playwrightCode` Field

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and execute...