CVE-2026-55376

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/python_tool_executor.py because allowed standard-library modules expose operating-system, process, and filesystem capabilities through public attributes that pass _safe_import() and _validate_code_safety(). The runner then executes the supplied tool with exec(), permitting commands and file operations as the backend application user; self-registration affects reachability, but portal triggering alone does not grant code control. This issue is fixed in 0.0.40.

• CWE-78
• CWE-94
• CWE-693

• https://github.com/heymrun/heym/commit/b36d795c6ea841b8f1b511a0952e274487ee4ef3
• https://github.com/heymrun/heym/releases/tag/v0.0.40
• https://github.com/heymrun/heym/security/advisories/GHSA-wcgw-9hfw-f6f2
• https://github.com/heymrun/heym/security/advisories/GHSA-wcgw-9hfw-f6f2

Published

Oct 13, 2026

Last Modified

Oct 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5537A security vulnerability has been detected in halex CourseSE…6.3
• CVE-2026-55370Logto is the modern, open-source auth infrastructure for Saa…6.4
• CVE-2026-55371OpenEXR is the reference implementation and specification fo…6.9
• CVE-2026-55373OpenEXR is the reference implementation and specification fo…6.2
• CVE-2026-55374canto-saas-api is a PHP library for interacting with the Can…4.8
• CVE-2026-55375canto-saas-api is a PHP library for interacting with the Can…5.3
• CVE-2026-55377Logto is the modern, open-source auth infrastructure for Saa…8.1
• CVE-2026-55378JS Recon is a JavaScript enumeration and SAST tool. From 1.2…9.3
• CVE-2026-55379Pillow is a Python imaging library. Prior to 12.3.0, PIL/Bdf…7.5
• CVE-2026-5538A vulnerability was detected in QingdaoU OnlineJudge up to 1…6.3
• CVE-2026-55380Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdI…7.5
• CVE-2026-55381InvoiceShelf is an open-source web & mobile app that helps t…7.1