HighVulnerability
CVE-2026-67428: Flyto2 Core SSRF through HTTP-emitting modules fetching caller-controlled URLs
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-67428
- Published
- Record updated
- Affected
- flyto-core <= 2.26.6
- Fixed in
- 2.26.7
- released July 7, 2026, 21 days before disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
Flyto2 Core, an execution kernel for automation and AI-agent workflows, has an SSRF flaw in versions prior to 2.26.7. Multiple HTTP-emitting modules, including core.api.http_get, core.api.http_post, graphql.query, and the agent and llm inline base_url branch, fetch caller-controlled URLs without calling validate_url_with_env_config. This allows requests to internal or metadata endpoints.
Mitigation
Fixed in version 2.26.7.
Related items
- MediumCVE-2026-127202: MLflow path traversal through model_id in the log outputs APISimilar attack · NVD/CVE Database
- LowAI chatbots are recommending fake retail websites, study findsSimilar attack · The Verge (AI)
- MediumPalo Alto tracks a massive Chinese AI attack that sadly lives up to industry fearsSimilar attack · CSO Online
- MediumAttackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society SectorsSimilar attack · Palo Alto Unit 42
- MediumCVE-2026-126994: braindecode model config deserialization flaw via activation argumentSimilar attack · NVD/CVE Database