PT-2026-65896

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlled output dir instead of validate path with env config and its FLYTO SANDBOX DIR confinement, allowing attacker-controlled response bytes t...