CVE-2026-100865

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process user.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/heymrun/heym/commit/341d1012367cd74f85c617e1c98dd49e3fcb5e83
https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h
https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h

Configurations

No configuration.

History

28 Sep 2026, 14:17

Type	Values Removed	Values Added
References	~~() https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h -~~	() https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h -

27 Sep 2026, 17:16

Type	Values Removed	Values Added
References	~~{'url': 'https://www.vulncheck.com/advisories/heym-before-0.0.53-multiple-rce-and-authentication-bypass-vulnerabilities', 'source': 'disclosure@vulncheck.com'}~~	() https://github.com/heymrun/heym/commit/341d1012367cd74f85c617e1c98dd49e3fcb5e83 -
Summary	(en) Heym before 0.0.53 contains multiple independent vulnerabilities. (1) The workflow condition evaluator uses Python eval() without an effective sandbox, allowing any user who can edit a workflow branch/condition node — or who can import a workflow template containing a malicious condition node — to execute arbitrary Python code as the backend process user when the workflow runs. (2) Slack webhook signature verification and (3) Telegram webhook secret-token verification fail open when the trigger node has no credentialId or an empty signing secret, allowing anyone who knows the public webhook URL to trigger workflows with the owner's credentials without authentication. (4) The OAuth authorization endpoint does not validate the redirect_uri scheme, so an attacker who registers a public OAuth client with a javascript: or data: redirect_uri and lures a victim to the consent screen receives the authorization code and executes attacker-controlled JavaScript in the Heym origin, including access to the victim's HttpOnly auth cookie. (5) WorkflowExecutionToken, PortalSession, HITLRequest.public_token, and OAuthAuthorizationCode values are stored in plaintext, so any database read exposure yields valid scoped bearer tokens, including portal and HITL tokens with a 168-hour TTL that permit workflow execution on behalf of the owner.	(en) Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process user.

27 Sep 2026, 02:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-09-27 02:17

Updated : 2026-09-28 20:57

NVD link : CVE-2026-100865

Mitre link : CVE-2026-100865

CVE.ORG link : CVE-2026-100865

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')