TI-2026-25332 CVE-2026-32871 · GHSA-vv7q-7jx5-f767
FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
Priority HIGH 82
FastMCP is a Pythonic way to build MCP servers and clients.
PrefectHQ
Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
PrefectHQ records in CISA KEVNo PrefectHQ vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
12 records
TI-2026-04695 CVE-2026-5366 · GHSA-7pm4-56h2-5rxr
Git Argument Injection in prefecthq/prefect
Priority HIGH 76
Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class.
TI-2026-03027 CVE-2026-3514 · GHSA-c635-393c-hcx2
Authentication Bypass in prefecthq/prefect
Priority HIGH 72
In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes.
TI-2026-06805 CVE-2026-7723 · GHSA-hvph-5985-r63v
PrefectHQ prefect WebSocket Endpoint in missing authentication
Priority HIGH 70
A flaw has been found in PrefectHQ prefect up to 3.6.13.
TI-2026-06804 CVE-2026-7722 · GHSA-6rr6-v7cj-mxpg
PrefectHQ prefect Health Check API health endswith improper authentication
Priority HIGH 70
A vulnerability was detected in PrefectHQ prefect up to 3.6.21.
TI-2024-07590 CVE-2024-8183 · GHSA-4v9f-r55g-g6hc
CORS Misconfiguration in prefecthq/prefect
Priority HIGH 66
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized domains to access sensitive data.
TI-2026-06807 CVE-2026-7725 · GHSA-6rcx-55r6-jx65
PrefectHQ prefect GitRepository Pull storage.py argument injection
Priority MEDIUM 57
A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6.
TI-2026-06806 CVE-2026-7724 · GHSA-p3pq-hxmr-vqqr
PrefectHQ prefect Webhook/Notification validate_restricted_url toctou
Priority MEDIUM 45
A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1.
TI-2026-83627 CVE-2026-120338 · GHSA-3g72-rrqc-f76c
Sandbox escape in Prefab UI Pyodide runner allows host code execution
Priority MEDIUM 44
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess.
TI-2026-50798 CVE-2026-72538 · GHSA-42fh-94w4-956q
PrefectHQ Prefect - Argument Injection
Priority MEDIUM 42
An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step branch field.
TI-2023-05548 CVE-2023-6022 · GHSA-4hh5-2678-83fx
Cross-Site Request Forgery (CSRF) in prefecthq/prefect
Priority LOW 38
Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5.
TI-2026-03028 CVE-2026-3515 · GHSA-cw25-2p92-7f75
Argument Injection in prefecthq/prefect
Priority LOW 37
A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the `reference` field.