CVE-2026-67543

Name of the Vulnerable Software and Affected Versions heym versions prior to 0.0.70

Description The skill executor skill python executor.py runs Python skills via a local backend subprocess without Docker isolation, relying only on a 512 MB RLIMIT and a 7-key environment variable denylist. This allows skills to execute within the backend execution context, granting unauthorized filesystem access, network egress, and access to non-denylisted environment variables. In the provided Docker configuration where the backend runs as root and /var/run/docker.sock is mounted, this can lead to host root escalation.

Recommendations Update to version 0.0.70.