A vulnerability has been found in Nor2-io heim-mcp up to 0.1.3 and classified as critical. Impacted is the function
registerTools of the file src/tools.ts of the component new_heim_application/deploy_heim_application/deploy_heim_application_to_cloud. This manipulation causes os command injection.
This vulnerability appears as CVE-2026-5602. The attack requires local access. In addition, an exploit is available.
It is suggested to install a patch to address this issue.
The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
