Command Injection Vulnerability in Heym's Automation System

CVE-2026-67546

What is CVE-2026-67546?

Prior to version 0.0.75, Heym's automation system had a vulnerability where the POST /api/mcp/fetch-tools endpoint, accessible to any authenticated user, accepted the stdio transport. This flaw allowed an attacker to execute arbitrary commands on the shared backend host using attacker-controlled arguments and environment variables, circumventing processes meant to validate commands against the MCP protocol. As a result, the command execution could occur irrespective of the protocol verification, leading to potential exploitation. This issue has been addressed in version 0.0.75 through role gating and establishing a trust boundary.

References