Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using object-graph introspection primitives. Attackers can use Python introspection techniques to recover the unrestricted __import__ function, import blocked modules such as os and subprocess, and access inherited backend environment variables containing database credentials and encryption keys to execute arbitrary host commands as the backend service user.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-45227 Sandbox Escape in Heym Before 0.0.21 via Python Object-Graph Introspection https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45227
Post summary
A new sandbox escape vulnerability (CVE-2026-45227) affecting Heym versions before 0.0.21 has been disclosed, involving Python Object-Graph Introspection; no PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-45227 Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restriction… https://www.cve.org/CVERecord?id=CVE-2026-45227
Post summary
The message announces a sandbox escape vulnerability (CVE‑2026‑45227) in Heym’s Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions, but it does not provide evidence of active exploitation, patches, or a PoC.