Prefecthq
9 CVEs across 3 Prefecthq products. Browse Prefecthq vulnerabilities, severities, and proof-of-concept exploits.
Prefecthq products with known CVEs
Prefecthq CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-72538 | High | 8.8 | 2026-08-11 | An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step… |
CVE-2026-5366 | Critical | 9.9 | 2026-06-20 | Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `comm… |
CVE-2026-3514 | High | 7.5 | 2026-06-02 | In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check prob… |
CVE-2026-3515 | High | 8.5 | 2026-05-24 | A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git comman… |
CVE-2026-7725 | Medium | 6.3 | 2026-05-04 | A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.p… |
CVE-2026-7724 | Medium | 5.0 | 2026-05-04 | A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate_restricted_url of the component… |
CVE-2026-7723 | High | 7.3 | 2026-05-04 | A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Execut… |
CVE-2026-7722 | Medium | 5.3 | 2026-05-04 | A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. P… |
CVE-2026-32871 | Critical | 10.0 | 2026-04-02 | FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by pars… |
CVE-2024-8183 | High | 7.6 | 2025-03-20 | A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data. This vulnerab… |
CVE-2023-6022 | High | 8.8 | 2023-11-16 | Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5. |