Description
Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute tokens after share removal. Attackers can mint a token with a TTL up to 10 years, which the owner cannot list or revoke, and repeatedly run the workflow consuming shared credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| heymrun | heym | 0.0.5 – < 0.0.113 | 0.0.113 |
References
- GitHub Security Advisory (GHSA-pwr6-6377-3cgv) vendor-advisory
- VulnCheck Advisory: Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens third-party-advisory