Skip to content
OpenAdvisories

Vendor

PrefectHQ

12 known vulnerabilities.

Products

Prefect 5 prefecthq/prefect 5 fastmcp 1 prefab-ui 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-120338

    Prefab UI Pyodide sandbox escape to host RCE

    Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feature is documented as isolation for untrusted code, including LLM-written UI. From prefab-ui 0.14.0 through 0.20.2 the l…

    PrefectHQ prefab-ui
  • Critical 9.9
    CVE-2026-5366 Public exploit

    Git Argument Injection in prefecthq/prefect

    Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to git commands, lacks validation and does not include a `--` sep…

    PrefectHQ prefecthq/prefect prefect PyPI
  • Critical 10.0
    CVE-2026-32871

    FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

    FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvider in FastMCP exposes internal APIs to MCP clients by parsing OpenAPI specifications. The RequestDirector class is responsible for constructing HTTP requests …

    PrefectHQ fastmcp fastmcp PyPI