Prefect has an Argument Injection issue
A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget_directory() and get_directory() methods in src/integrations/prefect-github/prefect_github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| Python (PyPI) | prefect | <= 3.6.18 | no fix |
References
- CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N- Weakness (CWE)
CWE-88- Platform
- Python (PyPI)
- Package
prefect- Disclosed
- 26.05.2026
- Updated
- 11.10.2026 15:17
Sources and licenses
OSV / GitHub Advisory Database - PYSEC-2026-2957 - PyPA Advisory Database; CC BY 4.0
OSV / GitHub Advisory Database - GHSA-cw25-2p92-7f75 - CC BY 4.0
Vulnerability history: prefect
All published vulnerabilities of this package (Python (PyPI)), newest first. Shows whether this is a one-off slip or a package that needs watching.
- Total entries
- 8
- First → latest
- 11.2023 06.2026
- Without a fix
- 1
- Exploited in attacks
- 0
Severity breakdown
- High 4
- Medium 2
- Low 2
Disclosures per year
- 2023: 1
- 2024: 0
- 2025: 1
- 2026: 6
-
Prefect has an Argument Injection issue this entry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.