CVE-2026-67544

The Heym workflow engine is vulnerable to Remote Code Execution (RCE) in versions prior to 0.0.71 . The root cause is the lack of sandboxing, AST validation, or role gates when handling the playwrightCode field in a Playwright node. The engine accepts an arbitrary Python code string, writes it to...