CVE-2026-73530

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-73530
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73530.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-73530
Aliases
  • GHSA-gc4h-hj7x-gp5p
Published
2026-08-13T19:01:46.150Z
Modified
2026-08-15T11:48:11.008607642Z
Severity
  • 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N CVSS Calculator
Summary
Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()
Details

Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked IPv6 address :: which the kernel routes to loopback identically to 0.0.0.0. Attackers can submit requests or trigger 302 redirects to to bypass the private IP range and blocked hostname checks inisprivateip(), reaching services bound to IPv6 loopback across thehttp.get,http.request, andhttp.batch` modules.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73530.json"
}
References

Affected packages

Git / github.com/flytohub/flyto-core

Affected ranges

Type
GIT
Repo
https://github.com/flytohub/flyto-core
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
029dba3fd7b26a8a81eb7ac7520fae1e454996e9
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.28.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

v2.*
v2.16.3
v2.17.6
v2.2.2
v2.25.27
v2.26.0
v2.26.10
v2.26.11
v2.26.3
v2.26.4
v2.26.6
v2.26.7
v2.26.8
v2.26.9
v2.5.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73530.json"