PT-2026-40452 · Heym · Heym

Published 2026-05-12 · Updated 2026-05-14 · CVE-2026-45227

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.21

Description A sandbox escape exists in the custom Python tool executor. Authenticated workflow authors can bypass sandbox restrictions using object-graph introspection primitives. By employing Python introspection techniques, attackers can recover the unrestricted import function to import blocked modules, such as os and subprocess. This allows access to inherited backend environment variables containing database credentials and encryption keys, enabling the execution of arbitrary host commands as the backend service user.

Recommendations Update to version 0.0.21 or later.

Exploit

Fix

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2026-45227

Affected Products

Heym

References · 9

• 🔥 https://github.com/heymrun/heym/pull/94 · Exploit
• https://github.com/heymrun/heym/commit/32b7e809d987d9b018ec8daa2cdaf48f627f26f1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-45227 · Security Note
• https://github.com/heymrun/heym/releases/tag/v0.0.21 · Note
• https://t.me/CVEtracker/53568 · Telegram Post
• https://twitter.com/CVEnew/status/2054323985475903956 · Twitter Post
• https://t.me/cveNotify/163446 · Telegram Post
• https://vulncheck.com/advisories/heym-sandbox-escape-via-python-introspection · Note
• https://twitter.com/VulmonFeeds/status/2054417339311870080 · Twitter Post