Skip to content
OpenAdvisories

Vendor

flyteorg

5 known vulnerabilities.

flyteorg at a glance

Last 12 months
1
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

flyteadmin 3 flyte 1 flyteconsole 1
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 6.5
    CVE-2026-108728

    Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook

    Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secre…

    flyteorg flyte
  • Low 3.5
    CVE-2023-41891

    FlyteAdmin SQL Injection in List Filters

    FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. Prior to version 1.1.124, list endpoints on FlyteAdmin have a SQL vulnerability where a malicious user can send a REST request with custom SQL s…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  • Medium 4.8
    CVE-2022-39273

    Default OAuth Authorization Server secret in FlyteAdmin

    FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  • Medium 6.5
    CVE-2022-31145

    Insufficient AccessToken Expiration Check in FlyteAdmin

    FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  • Critical 9.1
    CVE-2022-24856 EPSS 10%

    Server-Side Request Forgery in FlyteConsole

    FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery (SSRF) when FlyteConsole is open to the general internet. An attacker can exploit any user of a vulnerable instanc…

    flyteorg flyteconsole