Skip to content
OpenAdvisories

Product · PrefectHQ

Prefect

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-72538

    PrefectHQ Prefect - Argument Injection

    An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling inj…

    PrefectHQ Prefect
  • High 7.3
    CVE-2026-7723

    PrefectHQ prefect WebSocket Endpoint in missing authentication

    A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The …

    PrefectHQ Prefect prefect PyPI