Read the docs
TI-2026-06806 Aliases CVE-2026-7724GHSA-p3pq-hxmr-vqqr

PrefectHQ prefect Webhook/Notification validate_restricted_url toctou

Priority MEDIUM 45CWE-362Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate_restricted_url of the component Webhook/Notification. The manipulation leads to time-of-check time-of-use. It is possible to initiate the attack remotely. The attack is considered to have high complexity. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 3.6.28.dev2 addresses this issue. The identifier of the patch is 7c70ac54a5e101431d83b9f2681ec88d5e0021ed. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0025 16th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed prefect (PrefectHQ): 3.6.28.dev2prefect (PyPI): 3.6.28.dev2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PrefectHQprefect3.6.28.dev13.6.28.dev2Patch availableCNA
—prefect (PyPI)before 3.6.28.dev23.6.28.dev2Patch availableGHSA-p3pq-hxmr-vqqr
  • prefect VendorPrefectHQ Affected 3.6.28.dev1 Fixed in 3.6.28.dev2 Patch available CNA
  • prefect (PyPI) Vendor— Affected before 3.6.28.dev2 Fixed in 3.6.28.dev2 Patch available GHSA-p3pq-hxmr-vqqr

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:prefect:prefect:*:*:*:*:*:*:*:*——PrefectHQ
  • cpe:2.3:a:prefect:prefect:*:*:*:*:*:*:*:* Versions — — ·PrefectHQ

Remediation

  • Fix · CNA prefect (PrefectHQ) Fixed in 3.6.28.dev2
  • Fix · GHSA-p3pq-hxmr-vqqr prefect (PyPI) Fixed in 3.6.28.dev2 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-7724
  2. 2026-10-03 Alias added: GHSA-p3pq-hxmr-vqqr

References

Exploit 1

Patch 3

Advisory 1

Other 3

  • TI-2026-25332 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability CVSS 4.0CRITICAL 10.0
  • TI-2026-04695 Git Argument Injection in prefecthq/prefect CVSS 3.0CRITICAL 9.9
  • TI-2026-03027 Authentication Bypass in prefecthq/prefect CVSS 3.0HIGH 7.5
  • TI-2026-06805 PrefectHQ prefect WebSocket Endpoint in missing authentication CVSS 4.0MEDIUM 6.9
  • TI-2026-06804 PrefectHQ prefect Health Check API health endswith improper authentication CVSS 4.0MEDIUM 6.9
  • TI-2024-07590 CORS Misconfiguration in prefecthq/prefect CVSS 3.0HIGH 7.6
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences