flyto-core versions before 2.26.7 contain an SSRF vulnerability (CWE-918) due to insufficient validation of URLs fetched by various HTTP-emitting modules and API functions. These modules include src/core/modules/third_party/developer/http/requests.py, core.api.http_get, core.api.http_post, graphql.query, graphql.mutation, monitor.http_check, communication.slack_send, notification.discord.send_message, notification.slack.send_message, notification.teams.send_message, ai.vision_analyze, verify.visual_diff, browser.proxy_rotate, and agent and llm inline base_url branch fetch. The lack of validation via validate_url_with_env_config allows attackers to induce the server to make unauthorized requests to internal or metadata endpoints. The vulnerability is resolved in flyto-core version 2.26.7.

Successful exploitation of this SSRF vulnerability can lead to unauthorized internal network requests or access to sensitive metadata endpoints, potentially exposing confidential information or enabling further attacks. The CVSS score of 8.5 reflects high confidentiality impact, partial integrity impact, and no availability impact. There are no known exploits in the wild at this time.

Upgrade flyto-core to version 2.26.7 or later, where this SSRF vulnerability has been fixed. Since no official patch or remediation level is explicitly stated beyond the fixed version, applying this update is the recommended action. Monitor vendor advisories for any additional guidance.