Privilege Escalation Vulnerability in Heym by Heym

CVE-2026-110873

What is CVE-2026-110873?

A privilege escalation flaw exists in Heym versions 0.0.55 through 0.0.121, enabling malicious users who share workflows to alter the error_workflow_id field. This oversight permits them to redirect the error handling process to their own workflow, risking the exposure of the owner's decrypted credentials. Such a vulnerability can facilitate unauthorized access to sensitive data, enhancing the potential for data breaches.

References