CVE-2026-67425

Name of the Vulnerable Software and Affected Versions Flyto2 Core versions prior to 2.26.6

Description The llm.chat function reads provider keys, such as OPENAI API KEY and ANTHROPIC API KEY, from the environment and transmits them within the Authorization: Bearer header to a base url controlled by the caller. This allows an attacker to capture the operator's keys on a public host that bypasses the SSRF (Server-Side Request Forgery) guard, which is a vulnerability where a server is tricked into making requests to an unintended location.

Recommendations Update to version 2.26.6.