CVE Intelligence

Flyteorg vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Flyteorg products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-108728 Medium · 6.5 CWE-312 Oct 11, 2026
Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook
Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment variable, letting principals without Secret store access decode them from the Pod spec.