Read the docs
TI-2026-06807 Aliases CVE-2026-7725GHSA-6rcx-55r6-jx65

PrefectHQ prefect GitRepository Pull storage.py argument injection

Priority MEDIUM 57CWE-74Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-88.

Summary

A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component GitRepository Pull Handler. The manipulation of the argument commit_sha/directories results in argument injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 3.6.25.dev7 can resolve this issue. The patch is identified as 6a9d9918716ce4ee0297b69f3046f7067ef1faae. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00247 16th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed prefect (PrefectHQ): 3.6.25.dev7prefect (PyPI): 3.6.25.dev7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PrefectHQprefect3.6.25.dev63.6.25.dev7Patch availableCNA
—prefect (PyPI)before 3.6.25.dev73.6.25.dev7Patch availableGHSA-6rcx-55r6-jx65
  • prefect VendorPrefectHQ Affected 3.6.25.dev6 Fixed in 3.6.25.dev7 Patch available CNA
  • prefect (PyPI) Vendor— Affected before 3.6.25.dev7 Fixed in 3.6.25.dev7 Patch available GHSA-6rcx-55r6-jx65

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:prefect:prefect:*:*:*:*:*:*:*:*——PrefectHQ
  • cpe:2.3:a:prefect:prefect:*:*:*:*:*:*:*:* Versions — — ·PrefectHQ

Remediation

  • Fix · CNA prefect (PrefectHQ) Fixed in 3.6.25.dev7
  • Fix · GHSA-6rcx-55r6-jx65 prefect (PyPI) Fixed in 3.6.25.dev7 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-7725
  2. 2026-10-03 Alias added: GHSA-6rcx-55r6-jx65

References

Exploit 1

Patch 3

Advisory 1

Other 2

  • TI-2026-25332 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability CVSS 4.0CRITICAL 10.0
  • TI-2026-04695 Git Argument Injection in prefecthq/prefect CVSS 3.0CRITICAL 9.9
  • TI-2026-03027 Authentication Bypass in prefecthq/prefect CVSS 3.0HIGH 7.5
  • TI-2026-06805 PrefectHQ prefect WebSocket Endpoint in missing authentication CVSS 4.0MEDIUM 6.9
  • TI-2026-06804 PrefectHQ prefect Health Check API health endswith improper authentication CVSS 4.0MEDIUM 6.9
  • TI-2024-07590 CORS Misconfiguration in prefecthq/prefect CVSS 3.0HIGH 7.6
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences