CVE-2026-55786
2 advisories.
PyPI/flyto-core CVE-2026-55786: high 8.4
flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`
Action: Upgrade flyto-core to 2.26.4 or later.
pip install flyto-core==2.26.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.26.2 | 2.26.4 | - |
Fixed versions
| 2.26.4 |
Sources
- osv: GHSA-h9f9-h6gm-wc85
- https://github.com/flytohub/flyto-core/security/advisories/GHSA-h9f9-h6gm-wc85
- https://nvd.nist.gov/vuln/detail/CVE-2026-55786
- https://github.com/flytohub/flyto-core/commit/db7f116b1d3c5dcf94aded00d14118f81f3e225e
- https://github.com/flytohub/flyto-core
- https://github.com/flytohub/flyto-core/releases/tag/v2.26.4
- https://github.com/pypa/advisory-database/tree/main/vulns/flyto-core/PYSEC-2026-2482.yaml
CVE-2026-55786 · published · modified · JSON
PyPI/flyto-core CVE-2026-55786: high 8.4
flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`
Action: Upgrade flyto-core to 2.26.4 or later.
pip install flyto-core==2.26.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.26.2 | 2.26.4 | - |
Fixed versions
| 2.26.4 |
Sources
- osv: PYSEC-2026-2482
- https://github.com/flytohub/flyto-core/security/advisories/GHSA-h9f9-h6gm-wc85
- https://github.com/flytohub/flyto-core
- https://pypi.org/project/flyto-core
- https://github.com/advisories/GHSA-h9f9-h6gm-wc85
- https://nvd.nist.gov/vuln/detail/CVE-2026-55786
CVE-2026-55786 · published · modified · JSON