THREAT OPS › Threat News › [GHSA] GHSA-c9hr-64h3-gxpc (high) — Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation
[GHSA] GHSA-c9hr-64h3-gxpc (high) — Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation
GHSA-c9hr-64h3-gxpc Severity: high CVE: CVE-2026-67424
Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation
## Summary The HTTP modules that DO call the SSRF guard (`http.get`, `http.request`, `http.batch`) validate only the initial URL, then issue the request with aiohttp's default `allow_redirects=True` and perform no per-hop revalidation. An
Indicators of compromise
- CVE-2026-67424cve
- http://127.0.0.2/...`url
- http://attacker.tld/rurl
Original source: https://github.com/advisories/GHSA-c9hr-64h3-gxpc