Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-84207— Heym before 0.0.98 SSRF via WebSocket endpoints

Quick assessment

Affected
heymrun heym
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Heym 0.0.98 之前的版本未能将 SSRF（服务端请求伪造）出口防护应用于“WebSocket Send”和“WebSocket Trigger”节点，从而允许经过身份验证的用户连接到内部服务。攻击者可以通过构造带有任意 URL 和请求头的节点，使其工作流中的 WebSocket 节点能够访问内部服务，并通过 WebSocket Trigger 节点读取响应内容。

CVSS 5.4 · Medium

Affected Version Matrix 2

VendorProduct Version RangeStatus
heymrun heym < 0.0.98 affected
0.0.98 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-84207

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Heym before 0.0.98 SSRF via WebSocket endpoints
Source: CVE Program / CVE List V5
Vulnerability Description
Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craft workflow nodes with arbitrary URLs and headers to reach internal services and read responses from the WebSocket Trigger node.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
heymrun heym 0 ~ 0.0.98 -

II. Public POCs for CVE-2026-84207

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-84207

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-84207 (2)

Vendor Pages for CVE-2026-84207 (1)

Other References for CVE-2026-84207 (1)

IV. Related Vulnerabilities

Same product: heym
Same vendor: heymrun
Same weakness: CWE-918

V. Comments for CVE-2026-84207

No comments yet

Leave a comment