Vulnerability details

CVE-2026-67429

flytohub flyto-core

Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)

CVSS 3.1

10.0Critical

Official description

Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlled output_dir instead of validate_path_with_env_config and its FLYTO_SANDBOX_DIR confinement, allowing attacker-controlled response bytes to be written to arbitrary filesystem paths the process can access. This issue is fixed in version 2.26.6.

CVSS scores

Score	Version	Source	Vector
10.0Critical	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
flytohub	flyto-core	< 2.26.6	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/flytohub/flyto-core/commit/d5f89d71303e3c1e6418d347c5c55fcd173cc8cc x_refsource_MISC
https://github.com/flytohub/flyto-core/releases/tag/v2.26.6 x_refsource_MISC
https://github.com/flytohub/flyto-core/security/advisories/GHSA-2956-977x-2w3r x_refsource_CONFIRM

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-07-29
Last updated: 2026-07-29
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.57%

Probability of exploitation in 30 days

47.6%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-73
External Control of File Name or Path