{"id":"CVE-2026-100865","published":"2026-09-27T02:17:26.410","lastModified":"2026-09-28T20:57:50.143","description":"Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing in the workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process user.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://github.com/heymrun/heym/commit/341d1012367cd74f85c617e1c98dd49e3fcb5e83","tags":[]},{"url":"https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h","tags":[]},{"url":"https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h","tags":[]}],"exploitRefs":[{"url":"https://github.com/heymrun/heym/commit/341d1012367cd74f85c617e1c98dd49e3fcb5e83","tags":[]},{"url":"https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h","tags":[]},{"url":"https://github.com/heymrun/heym/security/advisories/GHSA-pm6h-x3h5-j38h","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows authenticated users to execute arbitrary Python and OS commands, posing a significant risk due to insufficient sandboxing of workflow condition expressions.","exploitability":"Exploitation is moderately hard as it requires authenticated access and editing of workflow condition nodes or importing malicious templates.","blast_radius":"If exploited, the impact could be severe, as it allows for arbitrary command execution as the backend process user, potentially leading to full system compromise.","remediation":"Upgrade to version 0.0.53 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","python","os","workflow"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-30T09:04:50.277Z"}}