# CVE-2026-45226: Heym authorization bypass in workflow execution

Source: https://junglewise.ai/threats/cve-2026-45226-heym-authorization-bypass-in-workflow-execution  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-12. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-45226 · Severity: high · CVSS 7.1 · Published 2026-05-12

Heym, an automation and workflow platform, contains a security flaw where users can bypass access controls to run workflows belonging to other people. By creating a custom workflow that references a victim's unique workflow ID, an attacker can force the system to execute that private workflow and view its results. This could lead to the exposure of sensitive data or the unauthorized triggering of automated actions, such as sending messages or modifying files, that the victim had configured.

Technologies: [Heymrun Heym](https://junglewise.ai/threats/technologies/heym). Vendors: [Heymrun](https://junglewise.ai/threats/vendors/heymrun).

## Quick answers

**Is CVE-2026-45226 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-45226 being exploited in the wild.

**How severe is CVE-2026-45226?** High severity, with a CVSS score of 7.1, published 12 May 2026.

**Which products and versions are affected?** Heymrun Heym < 0.0.21, before 0.0.21.

**Is there a fix for CVE-2026-45226?** A patch was published on 2026-05-10: Fix merged via PR #93 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-45226 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-45226?** Check whether you run Heymrun Heym at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An authorization bypass exists in Heym's workflow execution engine due to insufficient access validation when resolving sub-workflows. While the system correctly validates access to the 'root' workflow, it fails to verify that the actor has permissions for workflows referenced via 'execute' nodes or agent 'subWorkflowIds'. An authenticated attacker who knows or guesses a victim's workflow UUID can embed it into their own workflow; the backend will then load and execute the victim's workflow into the attacker's execution path. This allows the attacker to capture the output of the victim's workflow or trigger its side effects. The vulnerability was addressed in version 0.0.21 by enforcing access checks during the workflow caching process.

## Affected products

- heymrun Heym before 0.0.21

## Timeline

- 2026-05-10: patched: Fix merged via PR #93
- 2026-05-12: advisory: CVE published

## References

- [https://github.com/heymrun/heym/commit/3ae3ef6a7d3609da0e910f9ed6b81e99a1661ac8](https://github.com/heymrun/heym/commit/3ae3ef6a7d3609da0e910f9ed6b81e99a1661ac8)
- [https://github.com/heymrun/heym/pull/93](https://github.com/heymrun/heym/pull/93)
- [https://github.com/heymrun/heym/releases/tag/v0.0.21](https://github.com/heymrun/heym/releases/tag/v0.0.21)
- [https://www.vulncheck.com/advisories/heym-authorization-bypass-in-workflow-execution](https://www.vulncheck.com/advisories/heym-authorization-bypass-in-workflow-execution)

## Related threats

- [Heym privilege escalation via error_workflow_id field](https://junglewise.ai/threats/cve-2026-110873-heym-from-0-0-55-before-0-0-121-contains-a-privilege-escalation)
- [Heym token leakage in HITL review links via header spoofing](https://junglewise.ai/threats/cve-2026-105396-heym-before-v0-0-112-contains-a-token-leakage-vulnerability-in)
- [Heym Telegram webhook auth bypass](https://junglewise.ai/threats/cve-2026-101050-heym-before-0-0-53-fails-to-verify-the-x-telegram-bot-api-secret)
- [Heym authentication bypass in Slack webhook verification](https://junglewise.ai/threats/cve-2026-101049-heym-before-0-0-53-fails-to-verify-slack-request-signatures-when)
- [Heym multiple RCE and authentication bypass vulnerabilities](https://junglewise.ai/threats/cve-2026-100865-heym-before-0-0-53-contains-multiple-independent-vulnerabilities)