{"data":{"id":"7ca9ee90-3992-44ae-b376-ca824fb1666d","title":"CVE-2026-67425: Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys…","summary":"CVE-2026-67425 affects Flyto2 Core, an execution kernel for automation and AI-agent workflows, prior to 2.26.6. The llm.chat function reads provider keys such as OPENAI_API_KEY and ANTHROPIC_API_KEY from the environment and sends them in the Authorization: Bearer header to a caller-controlled base_url. An attacker can receive the operator's key on a public host that passes the SSRF guard.","solution":"This issue is fixed in version 2.26.6.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-67425","publishedAt":"2026-07-29T19:16:51.630Z","cveId":"CVE-2026-67425","cweIds":["CWE-201","CWE-522"],"cvssScore":"8.6","cvssSeverity":"high","severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["flyto-core@< 2.26.7 (fixed: 2.26.7)"],"affectedPackageNames":["flyto-core"],"affectedPackageRefs":["pypi:flyto-core"],"affectedVendors":["OpenAI","Anthropic"],"affectedVendorsRaw":["Flyto2 Core","llm.chat","OpenAI API","Anthropic API"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flyto2 Core llm.chat sends provider API keys to caller-controlled base_url","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00406,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":["GHSA-qq9q-xgm3-xv9g"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:10.666Z","patchAvailable":true,"disclosureDate":"2026-07-29T19:16:51.630Z","fixReleasedAt":"2026-07-08T02:02:06.253Z","daysToFix":-21,"fixCheckedAt":"2026-10-29T21:32:34.529Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"flyto-core","fixedVersion":"2.26.7","matchedVersion":"2.26.7","fixReleasedAt":"2026-07-08T02:02:06.253Z","daysToFix":-21,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:32:34.382Z"}]}}