{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-67542","assignerOrgId":"a0819718-46f1-4df5-94e2-005712e83aaa","state":"PUBLISHED","assignerShortName":"GitHub_M","dateReserved":"2026-07-29T18:47:17.074Z","datePublished":"2026-11-11T21:39:24.809Z","dateUpdated":"2026-11-11T21:39:24.809Z"},"containers":{"cna":{"title":"Heym: SSRF via POST /api/mcp/fetch-tools: any authenticated user reaches local/private URLs through the SSE and streamable-HTTP transports","problemTypes":[{"descriptions":[{"cweId":"CWE-918","lang":"en","description":"CWE-918: Server-Side Request Forgery","type":"CWE"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","version":"3.1"}}],"references":[{"name":"https://github.com/heymrun/heym/security/advisories/GHSA-jjvx-3wfc-p8hq","tags":["x_refsource_CONFIRM"],"url":"https://github.com/heymrun/heym/security/advisories/GHSA-jjvx-3wfc-p8hq"},{"name":"https://github.com/heymrun/heym/commit/72954f1f6264f6260bc1148b09ca10d613992b64","tags":["x_refsource_MISC"],"url":"https://github.com/heymrun/heym/commit/72954f1f6264f6260bc1148b09ca10d613992b64"},{"name":"https://github.com/heymrun/heym/releases/tag/0.0.70","tags":["x_refsource_MISC"],"url":"https://github.com/heymrun/heym/releases/tag/0.0.70"}],"affected":[{"vendor":"heymrun","product":"heym","versions":[{"version":"< 0.0.70","status":"affected"}]}],"providerMetadata":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-11-11T21:39:24.809Z"},"descriptions":[{"lang":"en","value":"Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, POST /api/mcp/fetch-tools is reachable by any authenticated user (lowest role; no admin/workflow association) and fetches an attacker-supplied URL through the sse and streamable_http transports with no scheme / private-IP / allowlist / redirect guard. The transport error is reflected in the HTTP 422 response, giving a semi-blind SSRF oracle, and the attacker also controls the outbound request headers. This issue has been patched in version 0.0.70."}],"source":{"advisory":"GHSA-jjvx-3wfc-p8hq","discovery":"UNKNOWN"}}}}