Skip to content
OpenAdvisories

Vendor

flyteorg

5 known vulnerabilities.

Products

flyteadmin 3 flyte 1 flyteconsole 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-108728

    Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook

    Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secre…

    flyteorg flyte
  • Medium 4.8
    CVE-2022-39273

    Default OAuth Authorization Server secret in FlyteAdmin

    FlyteAdmin is the control plane for the data processing platform Flyte. Users who enable the default Flyte’s authorization server without changing the default clientid hashes will be exposed to the public internet. In an effort to make enabling authentication…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go
  • Medium 6.5
    CVE-2022-31145

    Insufficient AccessToken Expiration Check in FlyteAdmin

    FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions. In versions 1.1.30 and prior, authenticated users using an external identity provider can continue to use Access Tokens and ID Tokens even after…

    flyteorg flyteadmin github.com/flyteorg/flyteadmin Go