Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: flyteorg Clear all filters
TI-2026-70707 CVE-2026-108728 · GHSA-9m8h-33m4-p9vv

Cleartext secret exposure in Flyte via admission webhook

Priority LOW 31

Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00232 Published 2026-10-11 No fix listed CWE-312
TI-2023-22283 CVE-2023-41891 · GHSA-r847-6w6h-r8g4

FlyteAdmin SQL Injection in List Filters

Priority MEDIUM 42

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01058 Published 2023-10-30 Fixed in 1.1.124 CWE-89
TI-2022-13188 CVE-2022-31145 · GHSA-qwrj-9hmp-gpxh

Insufficient AccessToken Expiration Check in FlyteAdmin

Priority LOW 31

FlyteAdmin is the control plane for Flyte responsible for managing entities and administering workflow executions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01033 Published 2022-07-13 Fixed in 1.1.31 CWE-613