These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-109362 debrief: Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens. The vulnerability allows former collaborators to execute JWT-auth workflows by reusing scoped workflow:execute tokens after share removal, potentially leading to unauthorized access and data breaches. Defenders should assess exposure and prioritize upgrading to version 0.0.113 or later. The CVE record [truncated]
CVE-2026-105396 is a token leakage vulnerability in Heym before v0.0.112 that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. This vulnerability can lead to capability tokens being captured and used to submit decisions executed with owner credentials. Defenders should assess exposure and prioritize updating to version 0.0.112 or later. The CVE [truncated]
CVE-2026-101050 is a high-severity vulnerability in the Heym product before version 0.0.53. The vulnerability allows remote unauthenticated attackers to post forged Telegram updates to trigger workflows with the owner's configured credentials and execute actions on attacker-supplied input. This is possible because the product fails to verify the X-Telegram-Bot-Api-Secret-Token header on Telegram webhook e [truncated]
CVE-2026-101049 is a high-severity vulnerability in the Heym workflow automation tool. A remote attacker can exploit this vulnerability by sending forged Slack events to trigger workflows with the owner's credentials, potentially leading to unauthorized access and data breaches. The vulnerability exists in Heym versions before 0.0.53, where Slack request signatures are not verified for trigger nodes lacki [truncated]
CVE-2026-100865 is a high-severity vulnerability in the Heym workflow executor service. Authenticated users can edit workflow condition nodes or import malicious templates to execute arbitrary Python and OS commands as the backend process user. This issue was introduced due to insufficient sandboxing when evaluating workflow condition expressions using Python's eval().
CVE-2026-45227 is a high-severity vulnerability in Heym before version 0.0.21, allowing authenticated workflow authors to bypass sandbox restrictions using Python introspection techniques. This could lead to arbitrary host command execution as the backend service user. The vulnerability exists in the custom Python tool executor of Heym, where attackers can recover the unrestricted __import__ function, imp [truncated]
CVE-2026-45226 is an authorization bypass vulnerability in Heym workflow execution. The vulnerability allows authenticated users to execute arbitrary workflows by referencing victim workflow UUIDs without proper access validation. Attackers can create workflows with execute nodes or agent subWorkflowIds pointing to victim workflow UUIDs to load and execute those workflows under attacker-controlled executi [truncated]
CVE-2026-45225 is a path traversal vulnerability in the file upload endpoint of Heym before version 0.0.21. This vulnerability allows authenticated users to write attacker-controlled files to arbitrary locations by supplying a crafted filename with traversal sequences. The unvalidated filename parameter in the upload_file() handler can be exploited to bypass path restrictions and write, read, or delete fi [truncated]