6 matches found
CVE-2026-120338
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted...
CVE-2026-120338 Prefab UI Pyodide sandbox escape to host RCE
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted...
CVE-2026-120338
The prefab-ui library (versions 0.14.0 through 0.20.2 ) contains a sandbox escape vulnerability in its Generative UI feature. The system executes caller-supplied Python code via Pyodide within a Deno subprocess. Because the launcher initializes Deno with unrestricted permissions (--allow-read , -...
EUVD-2026-114859
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted...
CVE-2026-120338: PrefectHQ prefab-ui: Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno…
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the launcher starts Deno with unrestricted...
PT-2026-134911
Name of the Vulnerable Software and Affected Versions prefab-ui versions 0.14.0 through 0.20.2 Description The Generative UI sandbox runs caller-supplied Python code within Pyodide inside a Deno subprocess. The launcher starts Deno with unrestricted --allow-read, --allow-write, and --allow-net...