Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, HTTP-emitting modules including src/core/modules/third_party/develope…

Flyto2 Core, an execution kernel for automation and AI-agent workflows, contains a Server-Side Request Forgery (SSRF) vulnerability prior to version 2.26.7. Multiple HTTP-emitting modules, including core.api.http_get, core.api.http_post, graphql.query, graphql.mutation, and several notification and AI modules, fetch caller-controlled URLs without invoking the validate_url_with_env_config validation function. This allows attackers to redirect requests to internal or cloud metadata endpoints, potentially exposing sensitive infrastructure data. The vulnerability affects a wide range of modules spanning API calls, GraphQL operations, monitoring, messaging integrations, AI vision analysis, and browser proxy functionality. The issue has been patched in version 2.26.7. A fix commit and security advisory are available on GitHub. Organizations using Flyto2 Core should upgrade immediately to mitigate the risk of SSRF-based attacks against internal services.