Skip to content

v2.26.6 — Security release

Choose a tag to compare

View all tags
@ChesterHsu ChesterHsu released this 07 Jul 15:27
Immutable release. Only release title and notes can be modified.
v2.26.6
2471c6e

Security release addressing three advisories reported via GitHub private vulnerability reporting and published 2026-07-07. All users should upgrade from 2.26.5.

Security fixes

  • GHSA-2956-977x-2w3r (Critical) — Arbitrary file write via image.download and other file-writing modules. Writes are now confined to FLYTO_SANDBOX_DIR via the central path guard.
  • GHSA-hr7p-wg7r-hg9m (High) — ${env.VAR} interpolation bypassed the env.get denylist. ${env.*} is now deny-by-default, opt-in via FLYTO_ENV_VAR_ALLOWLIST.
  • GHSA-qq9q-xgm3-xv9g (High) — Environment-derived LLM/API keys could be sent to a caller-controlled base_url. Env keys are now only attached to the official endpoint or hosts on FLYTO_TRUSTED_LLM_HOSTS.

Upgrade

pip install --upgrade flyto-core==2.26.6

Reported by @kaimandalic. See CHANGELOG.md for full details.

Contributors

kaimandalic
Assets 3
Loading