HighVulnerabilityLLM-specific
CVE-2026-67425: Flyto2 Core llm.chat sends provider API keys to caller-controlled base_url
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-67425
- Published
- Record updated
- Affected
- flyto-core < 2.26.7
- Fixed in
- 2.26.7
- released July 7, 2026, 21 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
CVE-2026-67425 affects Flyto2 Core, an execution kernel for automation and AI-agent workflows, prior to 2.26.6. The llm.chat function reads provider keys such as OPENAI_API_KEY and ANTHROPIC_API_KEY from the environment and sends them in the Authorization: Bearer header to a caller-controlled base_url. An attacker can receive the operator's key on a public host that passes the SSRF guard.
Mitigation
This issue is fixed in version 2.26.6.
Related items
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSame vendor · NVD/CVE Database
- HighCVE-2026-88066: Claude Desktop on Windows git.exe execution via search pathSame vendor · NVD/CVE Database
- HighCVE-2026-62331: praktor path traversal via Telegram document upload filenamesSame vendor · NVD/CVE Database
- MediumCVE-2026-111372: AI ChatBot for WooCommerce WoowBot plugin authorization bypass in RAG syncSame vendor · NVD/CVE Database
- MediumGHSA-w4fh-qvv9-3v23: Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverSame vendor · GitHub Advisory Database