# CVE-2026-67543: Heym Python skill execution privilege escalation

Source: https://junglewise.ai/threats/cve-2026-67543-heym-builds-and-runs-agentic-systems-and-business-process  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-11-11. Updated: 2026-11-11  
License: CC BY 4.0 with a link back

CVE-2026-67543 · Severity: high · CVSS 8.8 · Published 2026-11-11

Heym is a platform that builds and runs automated business processes using AI agents on self-hosted infrastructure. Prior to version 0.0.70, Heym's skill Python executor ran untrusted code without sandboxing, only applying weak resource limits and environment filtering. In the default Docker configuration where the backend runs as root with access to the Docker socket, this allowed attackers to escape the application and gain complete control of the host server.

Technologies: [Heym](https://junglewise.ai/threats/technologies/heym-heym). Vendors: [Heym](https://junglewise.ai/threats/vendors/heym).

## Quick answers

**Is CVE-2026-67543 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-67543 being exploited in the wild.

**How severe is CVE-2026-67543?** High severity, with a CVSS score of 8.8, published 11 November 2026.

**Which products and versions are affected?** Heym prior to 0.0.70.

**Is there a fix for CVE-2026-67543?** Yes: fixed in 0.0.70. Until then: Set the HEYM_PYTHON_TOOL_SANDBOX environment variable to "docker" to enforce Docker sandboxing for skill execution, or avoid running the backend as root and restrict access to the Docker socket. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-67543 attacked?** It is attacked over the network or with local access, in a software library.

**Am I affected by CVE-2026-67543?** Check whether you run Heym at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in 0.0.70

Set the HEYM_PYTHON_TOOL_SANDBOX environment variable to "docker" to enforce Docker sandboxing for skill execution, or avoid running the backend as root and restrict access to the Docker socket.

## Technical details

The vulnerability exists in skill_python_executor.py, which executes skill Python code (untrusted, user-supplied) in a local subprocess with no Docker isolation, only a 512 MB RLIMIT and a 7-key environment denylist, allowing filesystem access, network egress, and exposure of non-denylisted environment variables. By contrast, the sibling python_tool_executor.py properly enforces Docker sandboxing for user code. In deployments where the backend runs as root with /var/run/docker.sock mounted, an attacker controlling skill code can escalate to host root access.

## Affected products

- Heym Heym prior to 0.0.70

## Timeline

- 2026-11-11: disclosed
- 2026-11-11: patched

## References

- [https://github.com/heymrun/heym/commit/2155057f4153a1e3a7b789d104f7fa96e92964e5](https://github.com/heymrun/heym/commit/2155057f4153a1e3a7b789d104f7fa96e92964e5)
- [https://github.com/heymrun/heym/commit/28bb2901e4dea128ac493f67ee9478d230b7a3d7](https://github.com/heymrun/heym/commit/28bb2901e4dea128ac493f67ee9478d230b7a3d7)

## Related threats

- [Heym command injection via MCP stdio transport](https://junglewise.ai/threats/cve-2026-67546-heym-builds-and-runs-agentic-systems-and-business-process)
- [Heym HTTP node server-side request forgery](https://junglewise.ai/threats/cve-2026-67545-heym-builds-and-runs-agentic-systems-and-business-process)
- [Heym workflow engine arbitrary code execution via Playwright node](https://junglewise.ai/threats/cve-2026-67544-heym-builds-and-runs-agentic-systems-and-business-process)
- [Heym server-side request forgery in MCP transports](https://junglewise.ai/threats/cve-2026-67542-heym-builds-and-runs-agentic-systems-and-business-process)
- [Heym team-member management privilege escalation](https://junglewise.ai/threats/cve-2026-67541-heym-builds-and-runs-agentic-systems-and-business-process)