Sandbox Escape Vulnerability in Heym Python Tool Executor

CVE-2026-45227

What is CVE-2026-45227?

Heym versions prior to 0.0.21 exhibit a security flaw that enables authenticated workflow authors to evade sandbox protections. By leveraging Python's introspection capabilities, attackers can access the unrestricted import function, which allows them to import disallowed modules, including os and subprocess. This exploitation can lead to unauthorized access to sensitive backend environment variables such as database credentials and encryption keys. As a result, attackers may execute arbitrary commands on the host system with the privileges of the backend service user, posing significant risks to data integrity and system security.

References