flyteorg

Products

Product	CVEs	Exploited	Latest
flyteadmin	3	–	Oct 30, 2023
flyte	1	–	Oct 11, 2026
flyteconsole	1	–	May 17, 2022

CVE-2026-108728 Medium 6.5 Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook 0.2%
CVE-2023-41891 Low 3.5 FlyteAdmin SQL Injection in List Filters 1.1%
CVE-2022-39273 Medium 4.8 Default OAuth Authorization Server secret in FlyteAdmin 0.9%
CVE-2022-31145 Medium 6.5 Insufficient AccessToken Expiration Check in FlyteAdmin 1.0%
CVE-2022-24856 Critical 9.1 Server-Side Request Forgery in FlyteConsole 10.5%