CVE-2026-67543
- Source
- https://cve.org/CVERecord?id=CVE-2026-67543
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-67543.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-67543
- Aliases
-
- GHSA-hcv7-mg77-pg73
- Published
- 2026-11-11T21:39:53Z
- Modified
- 2026-11-12T10:45:41Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Heym Unsandboxed skill code execution: skills run via a local backend subprocess without the Docker isolation that Python tools mandate
- Details
-
Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, heym hardens one untrusted-code path but not its sibling. The Python tool executor (python_tool_executor.py) treats user code as untrusted and mandates a Docker sandbox (no network, read-only fs, non-root, no docker socket), failing closed. The skill executor (skill_python_executor.py) runs skill Python via a local backend subprocess with no Docker isolation — only a 512 MB RLIMIT and a 7-key env denylist — so a skill executes inside the backend execution context, with filesystem access, network egress, and non-denylisted environment variables that should not be exposed to untrusted/shared skills. In the shipped Docker config (backend runs as root + /var/run/docker.sock mounted), this escalates to host root. This issue has been patched in version 0.0.70.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-269", "CWE-94" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67543.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/67xxx/CVE-2026-67543.json
- https://github.com/heymrun/heym/commit/2155057f4153a1e3a7b789d104f7fa96e92964e5
- https://github.com/heymrun/heym/commit/28bb2901e4dea128ac493f67ee9478d230b7a3d7
- https://github.com/heymrun/heym/releases/tag/0.0.70
- https://github.com/heymrun/heym/security/advisories/GHSA-hcv7-mg77-pg73
- https://nvd.nist.gov/vuln/detail/CVE-2026-67543
Affected packages
Git / github.com/heymrun/heym
Affected ranges
- Type
- GIT
- Repo
- https://github.com/heymrun/heym
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "0" }, { "fixed": "0.0.70" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "fixed": "2155057f4153a1e3a7b789d104f7fa96e92964e5" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "28bb2901e4dea128ac493f67ee9478d230b7a3d7" } ], "source": "REFERENCES_COMMIT" }, { "original_tag": "0.0.70", "range": [ { "fixed": "b67e9efb6623385125347b2610e422d18f1c82fa" } ], "source": "REFERENCES_TAG" } ] }