CVE-2026-55786

Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requests and forwards executemodule arguments to the module registry without the requireauth dependency used by the REST...

CVE-2026-55787

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validateurlssrf and isprivateip in src/core/utils.py compare resolved addresses only against native private IPv4 and IPv6 ranges and do not unwrap IPv4-mapped, IPv4-compatible, 6to4, or NAT64 transition...

VulnCheck KEV: CVE-2026-55786

Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requests and forwards executemodule arguments to the module registry without the requireauth dependency used by the REST...

flyto-core 2.26.7 Arbitrary File Write

flyto-core version 2.26.7 suffers from an arbitrary file write vulnerability. data.csvwrite / data.jsontocsv write caller-supplied paths without calling the validatepathwithenvconfig sandbox guard, escaping FLYTOSANDBOXDIR. Exploit Title: flyto-core 2.26.7 - Arbitrary File Write Date: 2026-07-17...

flyto-core 2.26.7 - Arbitrary File Write

Exploit Title: flyto-core 2.26.7 - Arbitrary File Write Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla Vendor Homepage: https://github.com/flytohub/flyto-core Software Link: https://github.com/flytohub/flyto-core Version: flyto-core = 2.26.7 fixed 2.26.8; incomplete fix of GHSA-29...

Server-side Request Forgery (SSRF)

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the http.get, http.request, and http.batch modules when redirects are followed without per-hop...

Server-side Request Forgery (SSRF)

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the core.api.httpget, core.api.httppost, graphql.query, graphql.mutation, monitor.httpcheck,...

Server-side Request Forgery (SSRF)

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the run process. An attacker can access internal resources and exfiltrate sensitive internal...

Insufficiently Protected Credentials

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the baseurl parameter in the llm.chat, ai.model, llm.agent, and vector.connector processes. ...

Protection Mechanism Failure

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to Protection Mechanism Failure in the variable resolution process. An attacker can access sensitive environment variables by injecting...

External Control of File Name or Path

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to External Control of File Name or Path via the image.download process and other file-writing modules, which allow attacker-controlled...

CVE-2026-55787

creationtimestamp| type| source ---|---|--- 2026-07-06 18:35:08+00:00| published-proof-of-concept| https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8 2026-10-14 23:41:10+00:00| seen| https://infosec.exchange/users/cve/statuses/117441905950975783...

flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`

Unauthenticated Command Execution via HTTP MCP executemodule Summary The HTTP MCP endpoint POST /mcp in flyto-core accepts unauthenticated JSON-RPC tools/call requests and dispatches them to arbitrary registered modules, including sandbox.executeshell, which passes attacker-controlled input...

Missing Authentication for Critical Function

Overview flyto-core is an A workflow engine with 412 built-in modules. Trace every step. Replay from any point. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the executemodule process. An attacker can execute arbitrary operating system comman...