Prefecthq vulnerabilities

Products

• Prefect 5
• Prefecthq/prefect 5

Newest

• prefecthq prefab-ui Prefab UI Pyodide sandbox escape to host RCE CVE-2026-120338 10.0 CriticalNovember 1, 2026
• prefecthq prefect PrefectHQ Prefect - Argument Injection CVE-2026-72538 8.8 HighAugust 11, 2026
• prefect, prefecthq prefecthq/prefect +1 more Git Argument Injection in prefecthq/prefect CVE-2026-5366 Public exploitFix available 9.9 CriticalJune 20, 2026
• prefect, prefecthq prefecthq/prefect +1 more Authentication Bypass in prefecthq/prefect CVE-2026-3514 Fix available 7.5 HighJune 2, 2026
• prefecthq prefecthq/prefect Argument Injection in prefecthq/prefect CVE-2026-3515 Fix available 8.5 HighMay 24, 2026
• prefecthq prefect PrefectHQ prefect GitRepository Pull storage.py argument injection CVE-2026-7725 Fix available 5.3 MediumMay 4, 2026
• prefecthq prefect PrefectHQ prefect Webhook/Notification validate_restricted_url toctou CVE-2026-7724 Fix available 2.3 LowMay 4, 2026
• prefecthq prefect PrefectHQ prefect WebSocket Endpoint in missing authentication CVE-2026-7723 Fix available 6.9 MediumMay 4, 2026
• prefecthq prefect PrefectHQ prefect Health Check API health endswith improper authentication CVE-2026-7722 Fix available 6.9 MediumMay 4, 2026
• jlowin fastmcp, red hat openshift ai (rhoai), satellite 6.18 +2 more FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability CVE-2026-32871 Fix available 10.0 CriticalMarch 31, 2026
• prefecthq prefecthq/prefect CORS Misconfiguration in prefecthq/prefect CVE-2024-8183 Fix available 7.6 HighMarch 20, 2025
• prefect, prefecthq prefecthq/prefect +1 more Cross-Site Request Forgery (CSRF) in prefecthq/prefect CVE-2023-6022 Fix available 8.8 HighNovember 16, 2023