Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, the workflow engine variable resolver expands ${env.VAR} for any host…

CVE-2026-67427 affects Flyto2 Core, an execution kernel for automation and AI-agent workflows. Prior to version 2.26.6, the workflow engine's variable resolver expands ${env.VAR} for any host environment variable without enforcing an allowlist or capability policy check. This flaw allows a malicious workflow parameter to bypass the default capability policy denylist that governs env.get and env.load_dotenv operations. As a result, attackers can exfiltrate sensitive secrets and environment variables through otherwise permitted modules. The vulnerability represents a policy bypass leading to potential data exfiltration of host secrets. The issue has been patched in version 2.26.6 of Flyto2 Core. Users are advised to upgrade immediately to mitigate the risk of secret exposure.