Product
Flyto2 Core versions prior to 2.28.0 are susceptible to SSRF via an IPv6 loopback bypass in the is_private_ip() function, enabling access to internal services.