CVE-2026-67428 Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)
Attackers can exploit missing SSRF guards in HTTP modules to access internal or metadata endpoints via caller-controlled URLs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-67428?
CVE-2026-67428 is a high-severity server-side request forgery vulnerability in flytohub flyto-core, published on 29 Jul 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules including src/core/modules/third_party/developer/http/requests.py, core.api.http_get, core.api.http_post, graphql.query, graphql.mutation, monitor.http_check, communication.slack_send, notification.discord.send_message, notification.slack.send_message, notification.teams.send_message, ai.vision_analyze, verify.visual_diff, browser.proxy_rotate, and the agent and llm inline base_url branch fetch caller-controlled URLs without validate_url_with_env_config, allowing SSRF to internal or metadata endpoints. This issue is fixed in version 2.26.7.
Weakness: CWE-918
Which versions are affected by CVE-2026-67428?
3 open source packages ship an affected version, including flyto-core.
| Package | Affected | Fixed in |
|---|---|---|
flyto-core PyPI | All versions | 2.26.7 |
flyto-core PyPI | All versions | 2.26.7 |
flyto-core PyPI | All versions | 2.26.7 |
How do I fix CVE-2026-67428?
Upgrade flyto-core to 2.26.7 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-67428 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-67428 exists.
Sources
Also known as GHSA-pgwh-4jj4-qm8v, PYSEC-2026-3572.