Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and http.batch in src/core/modules/atomic/http/get.py, src/core/modules/atomic/http/request.py, and src/core/modules/atomic/http/batch.py validate only the initial URL, then follow redirects with allow_redirects=True and without per-hop Location revalidation, allowing a public URL to redirect into internal address space and return the internal response body. This issue is fixed in version 2.26.7.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-67424: SSRF Bypass in Flyto2 Core Exposes Internal Services. https://ift.tt/ibyQqmp
Post summary
The post announces a newly discovered SSRF bypass in Flyto2 Core that can expose internal services, but provides no PoC, exploit code, or patch guidance.
CVE-2026-67424 Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the HTTP modules http.get, http.request, and http.batch in src/core/modules… https://www.cve.org/CVERecord?id=CVE-2026-67424
Post summary
A new CVE (CVE-2026-67424) affecting Flyto2 Core’s HTTP modules prior to version 2.26.7 has been disclosed, but the text provides no exploitation, mitigation, or detailed technical information.