CVE-2026-55786 - Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`
CVE ID :CVE-2026-55786 Published : Oct. 14, 2026, 7:17 p.m. | 15 minutes ago Description :Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call requests and forwards...