CVE-2026-67546

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.75

Description An issue exists where the 'POST /api/mcp/fetch-tools' endpoint accepts the stdio transport, allowing any authenticated user with the lowest role to spawn a command with arbitrary arguments and an environment merged over os.environ. The process executes on the shared backend host before MCP (Model Context Protocol) protocol validation occurs, enabling the execution of commands regardless of whether they adhere to the MCP protocol.

Recommendations Update to version 0.0.75.