CVE-2026-100861 — heym before 0.0.105 SSRF via credential-controlled base URLs
heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URLs, allowing authenticated users to bypass SSRF protections. Attacke…
Published: 2026-09-27 · CVSS: 5.3 · CVSS 4.0
heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URLs, allowing authenticated users to bypass SSRF protections. Attackers can configure credentials pointing to loopback, private, or cloud-metadata addresses and read internal service responses returned as workflow node output.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7