Flytohub

7 CVEs across 1 Flytohub products. Browse Flytohub vulnerabilities, severities, and proof-of-concept exploits.

Flytohub products with known CVEs

ProductCVEs
Flyto-Core7
Flytohub CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-73530High7.72026-08-13Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs…
CVE-2026-67429Critical10.02026-07-29Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlle…
CVE-2026-67428High8.52026-07-29Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules including src/core/modules/third_party/develop…
CVE-2026-67427High8.62026-07-29Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, the workflow engine variable resolver expands ${env.VAR} for any hos…
CVE-2026-67426Critical9.32026-07-29Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the standalone flyto-verification service in src/core/verification_s…
CVE-2026-67425High8.62026-07-29Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys such as OPENAI_API_KEY and ANTHROPIC_AP…
CVE-2026-67424High8.52026-07-29Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and http.batch in src/core/…