Read the docs

flyteorg

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

flyteorg records in CISA KEV

No flyteorg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flyteadmin 3 records MEDIUM Flyte Console 1 record MEDIUM

Records

5 records

TI-2023-22283 CVE-2023-41891 · GHSA-r847-6w6h-r8g4

FlyteAdmin SQL Injection in List Filters

Priority MEDIUM 42

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01058 Published 2023-10-30 Fixed in 1.1.124 CWE-89
TI-2026-70707 CVE-2026-108728 · GHSA-9m8h-33m4-p9vv

Cleartext secret exposure in Flyte via admission webhook

Priority LOW 31

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00232 Published 2026-10-11 No fix listed CWE-312
TI-2022-13188 CVE-2022-31145 · GHSA-qwrj-9hmp-gpxh

Insufficient AccessToken Expiration Check in FlyteAdmin

Priority LOW 31

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01033 Published 2022-07-13 Fixed in 1.1.31 CWE-613
Open these records in search →