CVE-2026-105396— Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
Quick assessment
Affected
heymrun heym
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Heym 在 v0.0.112 之前的版本中，存在一个位于 函数中的令牌泄露漏洞，该漏洞允许未经身份验证的攻击者通过伪造 或 头来重定向 HITL（Human-in-the-Loop）审核链接。攻击者可以利用伪造的头信息触发匿名工作流，使得审核者收到的通知指向攻击者控制的域名，从而捕获能力令牌，并利用这些令牌提交由所有者凭据执行的操作。
Possible ATT&CK Techniques 1 AI
T1557 · Adversary-in-the-Middle
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-105396
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
Source: CVE Program / CVE List V5
Vulnerability Description
Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-Forwarded-Host headers. Attackers can trigger anonymous workflows with forged headers so reviewer notifications point to attacker domains, capturing capability tokens to submit decisions executed with owner credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-105396
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-105396
请登录查看更多情报信息。
Other References for CVE-2026-105396 (2)
IV. Related Vulnerabilities
Same product: heym
-
CVE-2026-101050
Heym before 0.0.53 Authentication Bypass via Telegram Webhoo -
CVE-2026-101049
Heym before 0.0.53 Slack Webhook Signature Verification Bypa -
CVE-2026-100865
Heym before 0.0.53 Remote Code Execution via eval() Sandbox -
CVE-2026-100863
Heym before 0.0.91 SSRF via image fetching and IPv6 validati -
CVE-2026-100864
heym before 0.0.91 Remote Code Execution via Expression Engi
Same vendor: heymrun
-
CVE-2026-101050
Heym before 0.0.53 Authentication Bypass via Telegram Webhoo -
CVE-2026-101049
Heym before 0.0.53 Slack Webhook Signature Verification Bypa -
CVE-2026-100865
Heym before 0.0.53 Remote Code Execution via eval() Sandbox -
CVE-2026-100863
Heym before 0.0.91 SSRF via image fetching and IPv6 validati -
CVE-2026-100864
heym before 0.0.91 Remote Code Execution via Expression Engi
Same weakness: CWE-346
-
CVE-2026-94485
Next.js: Information disclosure in Next.js App Router metada -
CVE-2026-94486
Next.js: Information disclosure in the Next.js development s -
CVE-2026-103922
Capacitor Android and iOS: remote content can be loaded at t -
CVE-2026-102588
Moodle: csrf in xml grade import -
CVE-2026-102878
mcp-chrome-bridge through 1.0.31 CORS Origin Bypass
V. Comments for CVE-2026-105396
No comments yet