CVE-2026-67544
highHeym builds and runs agentic systems and business-process automations on self-hosted infrastructure.
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.71, Heym's workflow engine accepts an arbitrary Python code string in the playwrightCode field of a Playwright node. This string is written to a temporary .py file and executed directly by the backend process via subprocess.Popen([sys.executable, script_path]) with no sandboxing, AST validation, or role gate. Any authenticated user — including a freshly registered account — can achieve full remote code execution (RCE) on the backend host, running as the service process user (observed as root in the default Docker deployment). This issue has been patched in version 0.0.71.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/heymrun/heym/commit/d2fd46c07754c4ed3e80b521aa54cc276039849b security-advisories@github.com
- https://github.com/heymrun/heym/releases/tag/0.0.71 security-advisories@github.com
- https://github.com/heymrun/heym/security/advisories/GHSA-mp23-7m6r-jfw4 security-advisories@github.com