CyberRota Analysis
AI-GeneratedFlyto2 Core versions prior to 2.26.6 are vulnerable due to improper handling of sensitive API keys, which are exposed through the Authorization header to attacker-controlled URLs. This flaw allows an attacker to potentially intercept and misuse the operator's keys, leading to unauthorized access to AI services. Organizations using Flyto2 Core for automation and AI workflows should prioritize upgrading to version 2.26.6 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, llm.chat reads provider keys such as OPENAI_API_KEY and ANTHROPIC_API_KEY from the environment and sends them in the Authorization: Bearer header to caller-controlled base_url, allowing an attacker to receive the operator's key on a public host that passes the SSRF guard. This issue is fixed in version 2.26.6.