Nor2-io vulnerabilities

Products

• heim-mcp 1

Latest Nor2-io CVEs

Newest publication first

1. CVE-2026-5602 Nor2-io heim-mcp new_heim_application tools.ts registerTools os command injection

   Published 2026-04-05

   Medium·CVSS 4.8 EPSS 0.91%

   A vulnerability was determined in Nor2-io heim-mcp up to 0.1.3. Impacted is the function registerTools of the file src/tools.ts of the component new_heim_application/deploy_heim_application/deploy_heim_application_to_cloud. This manipulation causes os command injection. The attac...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.