EUVD-2026-87824
GHSA-33w4-w3j3-cmvg
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network HTTP endpoint (AV:N), low complexity (AC:L), authenticated collaborator required (PR:L), no interaction; high confidentiality loss of decrypted secrets with no integrity/availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
4DescriptionCVE.org
Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credential access to exfiltrate the credential owner's secret. Attackers can override the destination URL in the config parameter to cause the server to send decrypted authentication secrets to attacker-controlled endpoints.
AnalysisAI
Credential exfiltration in Heym before version 0.0.106 allows an authenticated collaborator who has been granted shared access to a credential to cause the server to transmit the credential owner's decrypted secret to an attacker-controlled endpoint. The flaw lives in the POST /api/credentials/test endpoint, where the destination URL supplied in the config parameter is not validated, so a low-privileged collaborator can redirect a credential-verification request (CWE-918 server-side request forgery) and harvest plaintext secrets they were never entitled to read. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
No credit card · 7-day full trial
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires an authenticated user who is a collaborator with shared access to the target credential in Heym (self-hosted credential/secret management tool) before version 0.0.106. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N, 7.1) describes a network-exploitable, low-complexity flaw requiring low privileges, no user interaction, with high confidentiality impact and no integrity or availability impact - consistent with a credential-disclosure bug rather than code execution. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Heym to version 0.0.106 or later, which is the vendor-released fix per the GitHub security advisory GHSA-39qx-wp7x-69rq (https://github.com/heymrun/heym/security/advisories/GHSA-39qx-wp7x-69rq); the VulnCheck advisory at https://www.vulncheck.com/advisories/heym-before-0.0.106-credential-exfiltration-via-url-override corroborates the affected range and fix boundary. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory every Heym deployment, determine which are multi-user with collaborator sharing enabled, and treat those as the priority tier; temporarily suspend or tightly restrict collaborator sharing on production instances, and review egress and application logs for unexpected outbound requests from POST /api/credentials/test to non-approved destinations. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Sandbox escape in the heym workflow platform before 0.0.91 allows an authenticated user who can author or edit workflow
Python eval()-based remote code execution in Heym (heymrun/heym) before 0.0.53 lets an authenticated user who can edit a
Sandbox escape in Heym's custom Python tool executor (versions before 0.0.21) allows authenticated workflow authors to b
Heym deployments prior to 0.0.53 leave their Telegram webhook endpoints without verification of the X-Telegram-Bot-Api-S
Forged Slack webhook events can trigger Heym workflows with the owner's credentials because Heym before 0.0.53 skips Sla
Non-blind server-side request forgery in heym (heymrun) before 0.0.109 lets any registered user redirect backend HTTP re
Authorization bypass in Heym's workflow execution engine (versions before 0.0.21) allows any authenticated user to run w
Arbitrary file write (and read/delete) in Heym before 0.0.21 lets an authenticated user escape the intended upload stora
Cleartext storage and over-exposure of multiple capability secrets in Heym, a workflow automation platform, affects all
heym before 0.0.105 fails to enforce credential authorization in its Redis workflow node, letting an authenticated workf
Server-side request forgery in Heym 0.0.90 and earlier lets a caller-controlled workflow input steer an outbound HTTP fe
Authenticated SSRF in the Heym workflow engine before v0.0.98 allows any workflow author to reach internal network servi
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today