Agentic Systems Vulnerability in Heym Tool by Heym
CVE-2026-67543
8.8HIGH
What is CVE-2026-67543?
The Heym tool, designed for agentic systems and business process automations, has a vulnerability that enables a potential code execution risk in its skill execution mechanism. Prior to version 0.0.70, the tool allows untrusted skill Python code to run without adequate Docker isolation, exposing the execution context to filesystem and network access. This oversight can lead to escalated privileges, as the backend process may run as root, granting unauthorized access to the host system. Users are strongly encouraged to upgrade to version 0.0.70, which mitigates this risk.
Affected Version(s)
heym < 0.0.70