Vulnerability · Published Jul 29, 2026 · Assigned by GitHub_M
CVE-2026-67429Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
Critical 10.0
In plain English
A critical-severity path traversal in flyto-core from flytohub. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 48% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlled output_dir instead of validate_path_with_env_config and its FLYTO_SANDBOX_DIR confinement, allowing attacker-controlled response bytes to be written to arbitrary filesystem paths the process can access. This issue is fixed in version 2.26.6.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | flyto-core | 2.26.7 | GHSA-2956-977x-2w3r |
| PyPI | flyto-core | 2.26.7 | PYSEC-2026-3568 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| flytohub | flyto-core | < 2.26.6 |
Weakness: CWE-22, CWE-73 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H