CVE-2026-67425 Details
Description
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys such as OPENAI_API_KEY and ANTHROPIC_API_KEY from the environment and sends them in the Authorization: Bearer header to caller-controlled base_url, allowing an attacker to receive the operator's key on a public host that passes the SSRF guard. This issue is fixed in version 2.26.6.
A vulnerability in Flyto2 Core prior to version 2.26.6 allows for the unauthorized transmission of LLM/API keys from the operator to a caller-controlled base URL. This issue arises because the application reads sensitive API keys from the environment and sends them in the Authorization header to a base URL specified by the caller. The vulnerability can be exploited if the base URL points to an external server that bypasses the application's SSRF (Server-Side Request Forgery) protections, potentially leading to unauthorized access to the operator's API key on a public host.
Users are advised to upgrade to Flyto2 Core version 2.26.6 or later, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 29, 2026CISA-ADP
Assessed Jul 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/flytohub/flyto-core/security/advisories/GHSA-qq9q-xgm3-xv9g | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/flytohub/flyto-core/commit/d5f89d71303e3c1e6418d347c5c55fcd173cc8cc | [email protected] | Source CodeVendor |
| https://github.com/flytohub/flyto-core/releases/tag/v2.26.6 | [email protected] | Release NotesVendor |
| https://github.com/flytohub/flyto-core/security/advisories/GHSA-qq9q-xgm3-xv9g | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-201 | Insertion of Sensitive Information Into Sent Data | [email protected] |
| CWE-522 | Insufficiently Protected Credentials | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Flyto2 Core | < 2.26.6 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 29, 2026 | CVE Modified | CISA-ADP |
| Jul 29, 2026 | New CVE Received | [email protected] |