{"affected":[{"product":"heym","source":"CNA: GitHub_M","vendor":"heymrun","versions":[{"status":"affected","version":"< 0.0.70"}]}],"cveId":"CVE-2026-67542","cwes":["CWE-918"],"description":"Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user (lowest role; no admin/workflow association) and fetches an attacker-supplied URL through the sse and streamable_http transports with no scheme / private-IP / allowlist / redirect guard. The transport error is reflected in the HTTP 422 response, giving a semi-blind SSRF oracle, and the attacker also controls the outbound request headers. This issue has been patched in version 0.0.70.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"}],"modifiedAt":1794433164809,"publishedAt":1794433164809,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/heymrun/heym/security/advisories/GHSA-jjvx-3wfc-p8hq"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/heymrun/heym/commit/72954f1f6264f6260bc1148b09ca10d613992b64"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/heymrun/heym/releases/tag/0.0.70"}],"remediation":[],"revision":"79e6f88475f209d25265e436a2a8d91e3de0716b3dc3d4c2cb62ed26260e2e5d","sources":[{"modifiedAt":1794433164809,"name":"CNA: GitHub_M","retrievedAt":1794435077842,"url":"https://www.cve.org/CVERecord?id=CVE-2026-67542"}],"ssvc":null,"status":"published","title":"Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transports","updatedAt":1794435077842}