[ Vendor · 2 CVEs ]

flytohub

CVEs affecting flytohub published in the last 30 days, plus any flytohub CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-55786 14 Oct 2026 CVSS 8.4 flytohub flyto-coreFlyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts…
CVE-2026-55787 14 Oct 2026 CVSS 7.1 flytohub flyto-coreFlyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_url_ssrf and is_private_ip in src/core/utils.py…