Skip to content
OpenAdvisories

Vendor

PrefectHQ

12 known vulnerabilities.

Products

Prefect 5 prefecthq/prefect 5 fastmcp 1 prefab-ui 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-7725

    PrefectHQ prefect GitRepository Pull storage.py argument injection

    A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component GitRepository Pull Handler. The manipulation of the argument commit_sha/directori…

    PrefectHQ Prefect prefect PyPI
  • Medium 5.0
    CVE-2026-7724

    PrefectHQ prefect Webhook/Notification validate_restricted_url toctou

    A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate_restricted_url of the component Webhook/Notification. The manipulation leads to time-of-check time-of-use. It is possible to initiat…

    PrefectHQ Prefect prefect PyPI
  • Medium 5.3
    CVE-2026-7722

    PrefectHQ prefect Health Check API health endswith improper authentication

    A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipulation results in improper authentication. The attack is possible to be carried ou…

    PrefectHQ Prefect prefect PyPI