CVE-2026-67546

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure.

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.75, the same POST /api/mcp/fetch-tools endpoint (any authenticated user, lowest role) also accepts the stdio transport, which spawns the attacker-supplied command with attacker-supplied args and an environment merged over os.environ. The process executes on the shared backend host before MCP protocol validation fails — so side effects fire regardless of…

11. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-67546