Skip to contentPrefecthq Prefect vulnerabilities
- prefecthq prefectPrefectHQ Prefect - Argument InjectionCVE-2026-725388.8 High
- prefect, prefecthq prefecthq/prefect +1 moreGit Argument Injection in prefecthq/prefectCVE-2026-5366Public exploitFix available9.9 Critical
- prefect, prefecthq prefecthq/prefect +1 moreAuthentication Bypass in prefecthq/prefectCVE-2026-3514Fix available7.5 High
- prefecthq prefecthq/prefectArgument Injection in prefecthq/prefectCVE-2026-3515Fix available8.5 High
- prefecthq prefectPrefectHQ prefect GitRepository Pull storage.py argument injectionCVE-2026-7725Fix available5.3 Medium
- prefecthq prefectPrefectHQ prefect Webhook/Notification validate_restricted_url toctouCVE-2026-7724Fix available2.3 Low
- prefecthq prefectPrefectHQ prefect WebSocket Endpoint in missing authenticationCVE-2026-7723Fix available6.9 Medium
- prefecthq prefectPrefectHQ prefect Health Check API health endswith improper authenticationCVE-2026-7722Fix available6.9 Medium
- prefecthq prefecthq/prefectCORS Misconfiguration in prefecthq/prefectCVE-2024-8183Fix available7.6 High
- prefect, prefecthq prefecthq/prefect +1 moreCross-Site Request Forgery (CSRF) in prefecthq/prefectCVE-2023-6022Fix available8.8 High