rootpwn

critical · CVSS v3 8.8 · CVSS v4 8.7 · EPSS 0.00446

CVE-2026-100865

Heym before 0.0.53 uses Python eval with insufficient sandboxing in the workflow executor, allowing authenticated users to modify workflow c

Overview

Heym before 0.0.53 uses Python eval with insufficient sandboxing in the workflow executor, allowing authenticated users to modify workflow condition nodes or import malicious templates to run arbitrary Python and OS commands as the backend process user. This can lead to local privilege escalation and remote code execution on the server.

Description

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process user.

Impact

Confidentiality, integrity, and availability are compromised because attackers can execute arbitrary code on the backend, potentially exfiltrating data, modifying system state, or disrupting services. Defenders must secure the workflow executor and monitor for unauthorized template imports.

Remediation

Upgrade to Heym 0.0.53 or later where eval is replaced with a safe expression parser. If upgrade is not possible, disable workflow condition editing for non‑admin users, restrict template import to signed templates, and run the backend in a container or with reduced privileges to limit the impact of any code execution.

Risk context

Severity is critical with CVSS 8.8 and EPSS 0.00446, indicating a high likelihood of exploitation in the wild. Defenders should prioritize patching or mitigation immediately.

Affected products

  • Heym

Scores

Severity
critical
CVSS v2
9
CVSS v3
8.8
CVSS v4
8.7
EPSS
0.00446

Python eval workflow executor local privilege escalation backend process sandboxing critical vulnerability Heym

← All CVEs

Related CVEs

critical

CVE-2026-100740

A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remotely. The exploit is now public and may be used.

View analysis

critical

CVE-2026-100721

The critical CVE-2026-100721 affects the vm2 sandbox library, allowing an authorization bypass in the NodeVM external-module resolver. By configuring a custom resolver with context set to 'host', an attacker can load non-allowlisted modules that share a path prefix, causing host code execution. This flaw enables arbitrary code execution in the host process.

View analysis

critical

CVE-2026-100835

Contrast Security's Contrast platform before version 1.16.0 allows remote attestation relay attacks, enabling attackers to impersonate a trusted Coordinator or workload by relaying forged TEE attestation reports. This flaw bypasses the intended binding of attestation to specific hardware, undermining the integrity of Contrast's attested TLS (aTLS). The vulnerability can be exploited by intercepting traffic between the CLI and Coordinator or between the Coordinator and an attested component.

View analysis

critical

CVE-2026-100852

AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquidsoap config generation for live recording that fails to quote the streamer username in process.run calls. Authenticated station users with Streamers and Profile permissions can set a username containing shell metacharacters and trigger command execution as the Liquidsoap process user when recording closes.

View analysis