CVE-2026-45227 - Vulnerability Analysis

Overview

Heym before 0.0.21 contains a sandbox escape vulnerability caused by use of object-graph introspection primitives in the custom Python tool executor, letting authenticated workflow authors execute arbitrary host commands, exploit requires authentication.

Severity & Score

Impact

Authenticated attackers can execute arbitrary commands as the backend service user, potentially compromising the entire system.

Mitigation

Update to version 0.0.21 or later.

References

• https://github.com/heymrun/heym/releases/tag/v0.0.21
• https://www.vulncheck.com/advisories/heym-sandbox-escape-via-python-introspection
• https://github.com/heymrun/heym/commit/32b7e809d987d9b018ec8daa2cdaf48f627f26f1
• https://github.com/heymrun/heym/pull/94

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner