01 Record

CVE-2026-73530

Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()

MediumPUBLISHEDCNA: VulnCheck

Base score6.3 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

02 Description

Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()

Published: 2026-08-13 19:01Z23 HR AGO
Last updated: 2026-08-14 12:46Z5 HR AGO
Reserved: 2026-08-12
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: Medium (CVSS 6.3)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
Weaknesses: CWE-918
SSVC decision: ExploitationpocAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: d4eea34819e0a67a477fa6a872f1c5f0aef1ddee96df744398f3b528ad8ee4da

VendorProductVersionsPlatforms

flytohubflyto-core0 to < 2.28.0—