Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-67426

1 brief RSS
critical threat

Unauthenticated SSRF and Secret Exfiltration in Flyto Core

An unauthenticated SSRF vulnerability in the Flyto Core /run endpoint allows attackers to exfiltrate the internal FLYTO_RUNNER_SECRET and perform unauthorized requests against internal infrastructure.

Flyto Core ssrf credential-theft vulnerability cve-2026-67426 path-traversal arbitrary-file-write rce framework
1r 4t 1c