# flyto-core (PyPI) vulnerabilities 8 known vulnerabilities (2 critical, 6 high), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 2.33.0 (Sep 30, 2026): no advisory affects it - Newest unaffected release: 2.33.0 (Sep 30, 2026), the latest release - Weekly downloads: 194 - Dependents: 1 - Releases: 231 since 1.0.0 (Dec 16, 2025) - Registry: https://pypi.org/project/flyto-core/ - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2026-55786: 2.26.2 to 2.26.3 (2.26.4 is outside it) - CVE-2026-55787: 1.0.0 to 2.26.2 (2.26.3 is outside it) - CVE-2026-67429: 1.0.0 to 2.26.5 (2.26.7 is outside it) - CVE-2026-67428: 1.0.0 to 2.26.5 (2.26.7 is outside it) - CVE-2026-67427: 1.0.0 to 2.26.5 (2.26.7 is outside it) - CVE-2026-67426: 1.0.0 to 2.26.5 (2.26.7 is outside it) - CVE-2026-67425: 1.0.0 to 2.26.5 (2.26.7 is outside it) - CVE-2026-67424: 1.0.0 to 2.26.5 (2.26.7 is outside it) ## Advisories (8) ### [CVE-2026-55786](https://cve.now/CVE-2026-55786): Flyto2 Core: Unauthenticated Command Execution via HTTP MCP \`execute\_module\` - Severity: High 8.4 - Published: Oct 14, 2026 - Affected: from 2.26.2, fixed in 2.26.4. - Fixed in 2.26.4 (released May 30, 2026, 137 days before disclosure). - The latest release, 2.33.0, is not affected. ### [CVE-2026-55787](https://cve.now/CVE-2026-55787): Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate\_url\_ssrf - Severity: High 7.1 - Published: Oct 14, 2026 - Affected: fixed in 2.26.3. - Fixed in 2.26.3 (released May 30, 2026, 137 days before disclosure). - The latest release, 2.33.0, is not affected. ### [CVE-2026-67429](https://cve.now/CVE-2026-67429): Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules) - Severity: Critical 10.0 - Published: Jul 29, 2026 - Affected: fixed in 2.26.7. - Fixed in 2.26.7 (released Jul 8, 2026, 21 days before disclosure). - The latest release, 2.33.0, is not affected. ### [CVE-2026-67428](https://cve.now/CVE-2026-67428): Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to… - Severity: High 8.5 - Published: Jul 29, 2026 - Affected: fixed in 2.26.7. - Fixed in 2.26.7 (released Jul 8, 2026, 21 days before disclosure). - The latest release, 2.33.0, is not affected. ### [CVE-2026-67427](https://cve.now/CVE-2026-67427): Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted - Severity: High 8.6 - Published: Jul 29, 2026 - Affected: fixed in 2.26.7. - Fixed in 2.26.7 (released Jul 8, 2026, 21 days before disclosure). - The latest release, 2.33.0, is not affected. ### [CVE-2026-67426](https://cve.now/CVE-2026-67426): Flyto2 Core: Unauthenticated flyto-verification /run: callback\_url SSRF and internal runner-secret exfiltration - Severity: Critical 9.3 - Published: Jul 29, 2026 - Affected: fixed in 2.26.7; from 2.26.6, fixed in 2.26.7. - Fixed in 2.26.7 (released Jul 8, 2026, 21 days before disclosure). - The latest release, 2.33.0, is not affected. ### [CVE-2026-67425](https://cve.now/CVE-2026-67425): Flyto2 Core: LLM/API keys leak to an attacker-controlled base\_url - Severity: High 8.6 - Published: Jul 29, 2026 - Affected: fixed in 2.26.7. - Fixed in 2.26.7 (released Jul 8, 2026, 21 days before disclosure). - The latest release, 2.33.0, is not affected. ### [CVE-2026-67424](https://cve.now/CVE-2026-67424): Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation - Severity: High 8.5 - Published: Jul 29, 2026 - Affected: fixed in 2.26.7. - Fixed in 2.26.7 (released Jul 8, 2026, 21 days before disclosure). - The latest release, 2.33.0, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/flyto-core Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.