Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-55787— Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf

Quick assessment

Affected
flytohub flyto-core
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Flyto2 Core 是一个用于自动化和 AI 代理工作流的执行内核。在 2.26.3 版本之前，src/core/utils.py 中的 validate_url_ssrf 和 is_private_ip 函数仅将解析后的地址与本机私有 IPv4 和 IPv6 地址范围进行比较，而未对 IPv4 映射地址、IPv4 兼容地址、6to4 过渡地址或 NAT64 过渡地址进行解包处理。经过身份验证的工作流作者可以通过 Execution API 的 POST /v1/execute 路由、http.get 函数或受

CVSS 7.1 · High EPSS 0.24% · P13

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
flytohub flyto-core < 2.26.3 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-55787

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Flyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
Source: CVE Program / CVE List V5
Vulnerability Description
Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_url_ssrf and is_private_ip in src/core/utils.py compare resolved addresses only against native private IPv4 and IPv6 ranges and do not unwrap IPv4-mapped, IPv4-compatible, 6to4, or NAT64 transition addresses. An authenticated workflow author can provide a transition-form literal URL through the Execution API POST /v1/execute route, http.get, or sibling guarded outbound-request modules, causing the guard to accept an address whose embedded IPv4 points to loopback, RFC 1918, or cloud metadata services. On a host that routes the selected transition form, the outbound request reaches the internal destination and returns the response body to the workflow caller, enabling read SSRF and disclosure of internal-service data or cloud credentials. This issue is fixed in version 2.26.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
flytohub flyto-core < 2.26.3 -

II. Public POCs for CVE-2026-55787

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-55787

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-55787 (2)

Other References for CVE-2026-55787 (2)

IV. Related Vulnerabilities

Same product: flyto-core
Same vendor: flytohub
Same weakness: CWE-918

V. Comments for CVE-2026-55787

No comments yet

Leave a comment