CVE-2026-100865

high

Description

Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process user.

References

https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h

https://github.com/heymrun/heym/commit/341d1012367cd74f85c617e1c98dd49e3fcb5e83

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-87830

Details

Source: Mitre, NVD

Published: 2026-09-27

Updated: 2026-09-28

Risk Information

CVSS v2

Base Score: 9

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

CVSS v4

Base Score: 8.7

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Severity: High

EPSS

EPSS: 0.00323