CVE Feed

    Dashboard / CVE / CVE-2026-110873

    CVE-2026-110873

    Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's error_workflow_id because the field is missing from OWNER_ONLY_EXECUTION_FIELDS. Attackers can point the error workflow to their own workflow with an HTTP node, and when the parent workflow errors the owner's decrypted credentials are injected and exfiltrated.

    Published:Oct 14, 2026
    Last Modified:Oct 22, 2026
    EPS:Oct 14, 2026
    EPSS Score:0.00213
    CVSS Score:7.1

    Affected Products

    Vendor
    Heymrun
    Product
    Heym

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-55376 (CVSS 8.8) — Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to …
    CVE-2026-109362 (CVSS 5.3) — Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to…
    CVE-2026-105396 (CVSS 5.3) — Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthentic…
    CVE-2026-101050 (CVSS 8.3) — Heym before 0.0.53 fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook endpoints wh…
    CVE-2026-101049 (CVSS 8.3) — Heym before 0.0.53 fails to verify Slack request signatures when trigger nodes lack credential IDs or have emp…
    CVE-2026-100865 (CVSS 8.7) — Heym before 0.0.53 evaluates workflow condition expressions using Python's eval() with insufficient sandboxing…
    CVE-2026-100864 (CVSS 8.7) — heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map/filter and f…
    CVE-2026-100863 (CVSS 5.3) — Heym versions 0.0.90 and earlier contain two server-side request forgery (SSRF) egress gaps, both remediated i…
    CVE-2026-100862 (CVSS 6.9) — heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions …
    CVE-2026-100861 (CVSS 5.3) — heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URL…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High