Flyto Core
Execution engine for AI agents. 412 modules: browser, file, Docker, data, crypto.
2.12.6version the registry lists (2 published)
8reported issues
Yeslisted version affected
Hold off. At least one reported issue affects the version the registry lists. The package may have a newer release, so read the issue below and check before you install.
Registry name io.github.flytohub/flyto-core
· Source code
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| GHSA-c9hr-64h3-gxpcFlyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidationAlso filed as CVE-2026-67424, PYSEC-2026-3569 | high | Affected | Jul 30, 2026 |
| GHSA-pgwh-4jj4-qm8vFlyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)Also filed as CVE-2026-67428, PYSEC-2026-3572 | high | Affected | Jul 30, 2026 |
| GHSA-jx74-cqjv-2c67Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltrationAlso filed as CVE-2026-67426, PYSEC-2026-3571 | critical | Affected | Jul 30, 2026 |
| GHSA-qq9q-xgm3-xv9gFlyto2 Core: LLM/API keys leak to an attacker-controlled base_urlAlso filed as CVE-2026-67425, PYSEC-2026-3573 | high | Affected | Jul 30, 2026 |
| GHSA-hr7p-wg7r-hg9mFlyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylistedAlso filed as CVE-2026-67427, PYSEC-2026-3570 | high | Affected | Jul 30, 2026 |
| GHSA-2956-977x-2w3rFlyto2 Core: Arbitrary file write via image.download (and other file-writing modules)Also filed as CVE-2026-67429, PYSEC-2026-3568 | critical | Affected | Jul 30, 2026 |
| GHSA-794r-5rp2-fpg8flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrfAlso filed as CVE-2026-55787, PYSEC-2026-2481 | high | Affected | Jul 6, 2026 |
| GHSA-h9f9-h6gm-wc85flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`Also filed as CVE-2026-55786, PYSEC-2026-2482 | high | Not flagged | Jul 6, 2026 |
Versions in the registry
2.12.6 (listed), 2.2.2