110 matches found
prefect-cve-2026-5366
PoC: CVE-2026-5366 - Prefect GitRepository における Git 引数インジェクション 脆弱性: commitsha を介した RCE につながる git 引数インジェクション（directories を介した引数インジェクションもあり） バージョン: 3.6.23 で脆弱、3.6.25+ で修正済み ファイル: src/prefect/runner/storage.py Huntr: https://huntr.com/bounties/e2e88a0f-a8f6-49c9-94c5-e98dc385f07a CVE: CVE-2026-5366...
CVE-2026-72538
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
EUVD-2026-56008
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538
CVE-2026-72538 affects PrefectHQ Prefect up to version 3.8.2. An argument injection flaw occurs in the git_clone pull step where the branch field is passed directly to git pull without sanitization, enabling an authenticated user to achieve remote code execution on the Prefect server. The issue i...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
CVE-2026-72538 PrefectHQ Prefect - Argument Injection
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the gitclone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This...
PT-2026-70113
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. Thi...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, dagster, mycli, datadog-agent, ansible-operator-fips, airflow-core, open-webui, vllm-openai-cuda-13.0, apache-beam-python-3.11-sdk, openstack-horizon-2025.1, prefect, kubeflow, openstack-kolla-toolbox-2025.1, superset,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, dagster, mycli, datadog-agent, ansible-operator-fips, airflow-core, open-webui, vllm-openai-cuda-13.0, apache-beam-python-3.11-sdk, openstack-horizon-2025.1, prefect, kubeflow, openstack-kolla-toolbox-2025.1, superset,...
ROOT-APP-PYPI-CVE-2026-3515 CVE-2026-3515 in rootio-prefect - Patched by Root
Root has patched CVE-2026-3515 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-7722 CVE-2026-7722 in rootio-prefect - Patched by Root
Root has patched CVE-2026-7722 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-7723 CVE-2026-7723 in rootio-prefect - Patched by Root
Root has patched CVE-2026-7723 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available...
PYSEC-2026-2957 Prefect has an Argument Injection issue
A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper...
PYSEC-2026-2958 Prefect Unauthenticated Event Injection via /api/events/in WebSocket
A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be...
PYSEC-2026-2955 Prefect Git Argument Injection in GitRepository Pull Steps
A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component GitRepository Pull Handler. The manipulation of the argument commitsha/directories results in argument injection. It is...
PYSEC-2026-2959 Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url
A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validaterestrictedurl of the component Webhook/Notification. The manipulation leads to time-of-check time-of-use. It is possible to initiate the attack remotely. The attack is...
PYSEC-2026-2956 Prefect Auth Bypass via endswith() Health Check Exemption
A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit is now public...
PT-2026-59586
A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component GitRepository Pull Handler. The manipulation of the argument commit sha/directories results in argument injection. It i...
PYSEC-2026-1800 Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
A CORS Cross-Origin Resource Sharing misconfiguration in prefecthq/prefect prior to version 3.0.3 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruptio...