CVE-2026-105396

5.4 MEDIUMpublic exploit available

Published 2026-10-05 · Updated 2026-10-05

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to attacker domains, capturing capability tokens to submit decisions executed with owner credentials.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weaknesses

CWE-346

Public exploit & PoC references

https://github.com/heymrun/heym/security/advisories/GHSA-6rv3-wh25-7pg5

All references

https://github.com/heymrun/heym/security/advisories/GHSA-6rv3-wh25-7pg5
https://www.vulncheck.com/advisories/heym-before-0.0.112-hitl-review-token-leak-via-spoofable-origin-header

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100598PoC
HIGHCVE-2026-100642PoC
HIGHCVE-2026-100646PoC
HIGHCVE-2026-100803
HIGHCVE-2026-100809
HIGHCVE-2026-100816
MEDIUMCVE-2026-100821
HIGHCVE-2026-100830

Related by shared AI tags and CWE weakness class. Browse the full archive.