CVE-2026-55376

Summary

An authenticated user can bypass Python sandboxing in Heym's workflow tools by using standard library modules that expose OS, process, and filesystem capabilities through public attributes. This allows attackers to execute arbitrary commands and access files as the backend application user.

Exploitability

Exploitation requires an authenticated user with workflow creation/editing privileges who can add a custom Python tool; it's moderately difficult due to the need for crafting a specific payload that leverages standard library attributes, but the sandbox bypass is straightforward once achieved.

Blast radius

The impact could be significant as attackers can execute arbitrary code and access files as the backend application user, potentially leading to full system compromise if the backend has elevated privileges or access to sensitive data.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 0.0.40 or later to fix the Python sandboxing bypass vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.