Every CVE Search/ Get API key

CVE-2026-3515

Argument Injection in prefecthq/prefect

8.5 HighFix available

CVE-2026-3515 is a high vulnerability (CVSS 8.5) in Prefecthq Prefecthq/prefect, published May 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.30%, the 22nd percentile. Fixed in rootio-prefect 2.14.13+root.io.4.

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
Low
Availability
None

Exploit likelihood

0.30%Up 0.2 points since May 24, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.5

Argument Injection in prefecthq/prefect

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Record
CVE-2026-3515
CVSS 3.0
8.5 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Weakness
CWE-88
Updated
2026-11-02
EUVDEUVD-2026-31563 8.5

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Record
EUVD-2026-31563
CVSS 3.0
8.5 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-cw25-2p92-7f75 8.5

Prefect has an Argument Injection issue

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Record
GHSA-cw25-2p92-7f75
CVSS 3.0
8.5 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Weakness
CWE-88
Updated
2026-11-02
NVD 8.5

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Record
CVE-2026-3515
CVSS 3.0
8.5 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Weakness
CWE-88
Updated
2026-11-02
OSVGHSA-cw25-2p92-7f75 8.5

Prefect has an Argument Injection issue

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Record
GHSA-cw25-2p92-7f75
CVSS 3.0
8.5 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Weakness
CWE-88
Updated
2026-11-02
OSVPYSEC-2026-2957 8.5

Prefect has an Argument Injection issue

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Record
PYSEC-2026-2957
CVSS 3.0
8.5 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2026-3515 No score

CVE-2026-3515 in rootio-prefect - Patched by Root

Root has patched CVE-2026-3515 in the rootio-prefect package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2026-3515
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
prefect
PyPI
 through 3.6.18 None known
prefect
PyPI
 through 3.6.18, plus listed versions
0.10.00.10.10.10.20.10.30.10.4
Show 45 moreShow less
0.10.50.10.60.10.70.11.00.11.10.11.20.11.30.11.40.11.50.12.00.12.10.12.20.12.30.12.40.12.50.12.60.13.00.13.10.13.100.13.110.13.120.13.130.13.140.13.150.13.160.13.170.13.180.13.190.13.20.13.30.13.40.13.50.13.60.13.70.13.80.13.90.14.00.14.10.14.100.14.110.14.120.14.130.14.140.14.150.14.16
 None known
prefect
PyPI
 through 3.6.18, plus listed versions
0.10.00.10.10.10.20.10.30.10.4
Show 45 moreShow less
0.10.50.10.60.10.70.11.00.11.10.11.20.11.30.11.40.11.50.12.00.12.10.12.20.12.30.12.40.12.50.12.60.13.00.13.10.13.100.13.110.13.120.13.130.13.140.13.150.13.160.13.170.13.180.13.190.13.20.13.30.13.40.13.50.13.60.13.70.13.80.13.90.14.00.14.10.14.100.14.110.14.120.14.130.14.140.14.150.14.16
 None known
rootio-prefect
Root:PyPI
 before 2.14.13+root.io.4
2.14.13+root.io.42.11.5+root.io.52.14.13+root.io.52.11.5+root.io.62.10.4+root.io.62.11.5+root.io.7

History

History
WhenChangedSources
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

This page doesn't list everything

Left out here: 1,331 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open