Heym HTTP workflow node SSRF against internal hosts

high severity · published 2026-11-11

An unauthenticated attacker can trigger a preconfigured HTTP node that targets internal addresses, such as cloud metadata endpoints or private network hosts. The self-hosted Heym instance then reaches those internal systems on the attacker's behalf.

CVE: CVE-2026-67545

Source: NVD

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 2567 and your operating system.