CVE-2026-67425CWE-201CWE-522

Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url

High · published July 29, 2026

CVSS v3.1
8.6
EPSS
1%
Percentile
45.6
In the wild
Unconfirmed
What it is

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys such as OPENAI_API_KEY and ANTHROPIC_API_KEY from the environment and sends them in the Authorization: Bearer header to caller-controlled base_url, allowing an attacker to receive the operator's key on a public host that passes the SSRF guard. This issue is fixed in version 2.26.6.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00556 · 45.6th percentile
Weaknesses
CWE-201 · Insertion of Sensitive Information Into Sent Data; CWE-522 · Insufficiently Protected Credentials
Published
2026-07-29T18:35Z
EPSS history
Timeline
  • 29 JUL 18:35Z
    Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
    cvelistv5