{"data":{"id":"9841f83f-99d7-473b-b768-299517b657a1","title":"CVE-2026-67428: Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules…","summary":"Flyto2 Core, an execution kernel for automation and AI-agent workflows, has an SSRF flaw in versions prior to 2.26.7. Multiple HTTP-emitting modules, including core.api.http_get, core.api.http_post, graphql.query, and the agent and llm inline base_url branch, fetch caller-controlled URLs without calling validate_url_with_env_config. This allows requests to internal or metadata endpoints.","solution":"Fixed in version 2.26.7.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-67428","publishedAt":"2026-07-29T19:16:52.087Z","cveId":"CVE-2026-67428","cweIds":["CWE-918"],"cvssScore":"8.5","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["flyto-core@<= 2.26.6 (fixed: 2.26.7)"],"affectedPackageNames":["flyto-core"],"affectedPackageRefs":["pypi:flyto-core"],"affectedVendors":[],"affectedVendorsRaw":["Flyto2 Core","AI-agent workflows","ai.vision_analyze","agent and llm inline base_url branch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Flyto2 Core SSRF through HTTP-emitting modules fetching caller-controlled URLs","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00409,"epssCheckedAt":"2026-11-12T15:03:08.295Z","kevDateAdded":null,"advisoryAliases":["GHSA-pgwh-4jj4-qm8v"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:46:10.184Z","patchAvailable":true,"disclosureDate":"2026-07-29T19:16:52.087Z","fixReleasedAt":"2026-07-08T02:02:06.253Z","daysToFix":-21,"fixCheckedAt":"2026-10-29T21:32:33.786Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"flyto-core","fixedVersion":"2.26.7","matchedVersion":"2.26.7","fixReleasedAt":"2026-07-08T02:02:06.253Z","daysToFix":-21,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:32:33.639Z"}]}}