TI-2026-06804 Aliases CVE-2026-7722 GHSA-6rr6-v7cj-mxpg

PrefectHQ prefect Health Check API health endswith improper authentication

HIGH 70CWE-287Published 2026-05-04 · Updated 2026-05-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Security bypass
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-287.

Summary

A vulnerability was detected in PrefectHQ prefect up to 3.6.21. This impacts the function endswith of the file /api/health of the component Health Check API. Performing a manipulation results in improper authentication. The attack is possible to be carried out remotely. The exploit is now public and may be used. Upgrading to version 3.6.22 will fix this issue. The patch is named e21617125335025b4b27e7d6f0ca028e8e8f3b79. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00453 39th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix Fixed prefect (PrefectHQ): 3.6.22prefect (PyPI): 3.6.22

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
PrefectHQ	prefect	3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; 3.6.6; 3.6.7; 3.6.8; 3.6.9; 3.6.10; 3.6.11; 3.6.12; 3.6.13; 3.6.14; 3.6.15; 3.6.16; 3.6.17; 3.6.18; 3.6.19; 3.6.20; 3.6.21	3.6.22	Patch available	CNA
—	prefect (PyPI)	before 3.6.22	3.6.22	Patch available	GHSA-6rr6-v7cj-mxpg

prefect VendorPrefectHQ Affected 3.6.0; 3.6.1; 3.6.2; 3.6.3; 3.6.4; 3.6.5; 3.6.6; 3.6.7; 3.6.8; 3.6.9; 3.6.10; 3.6.11; 3.6.12; 3.6.13; 3.6.14; 3.6.15; 3.6.16; 3.6.17; 3.6.18; 3.6.19; 3.6.20; 3.6.21 Fixed in 3.6.22 Patch available CNA
prefect (PyPI) Vendor— Affected before 3.6.22 Fixed in 3.6.22 Patch available GHSA-6rr6-v7cj-mxpg

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:prefect:prefect::::::::	—	—	PrefectHQ

cpe:2.3:a:prefect:prefect:*:*:*:*:*:*:*:* Versions — — ·PrefectHQ

Remediation

Fix · CNA prefect (PrefectHQ) Fixed in 3.6.22
Fix · GHSA-6rr6-v7cj-mxpg prefect (PyPI) Fixed in 3.6.22 Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-7722
2026-10-03 Alias added: GHSA-6rr6-v7cj-mxpg
2026-10-25 EPSS moved to the below the 50th percentile

References

Exploit 1

https://gist.github.com/nedlir/f576abbb0e491dc9bb7e106c140dda04

Patch 3

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-7722

Other 3

TI-2026-25332 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability CVSS 4.0CRITICAL 10.0
TI-2026-04695 Git Argument Injection in prefecthq/prefect CVSS 3.0CRITICAL 9.9
TI-2026-03027 Authentication Bypass in prefecthq/prefect CVSS 3.0HIGH 7.5
TI-2026-06805 PrefectHQ prefect WebSocket Endpoint in missing authentication CVSS 4.0MEDIUM 6.9
TI-2024-07590 CORS Misconfiguration in prefecthq/prefect CVSS 3.0HIGH 7.6
TI-2026-06807 PrefectHQ prefect GitRepository Pull storage.py argument injection CVSS 4.0MEDIUM 5.3

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences