CVE-2026-5366Disclosure(prefect / prefect)

LOWCVSS 9.9 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to git commands, lacks validation and does not include a `--` separator to distinguish user input from git flags. This allows attackers to inject arbitrary git flags, such as `--upload-pack`, enabling execution of external programs. Additionally, the `directories` parameter can be exploited to inject git flags during sparse-checkout operations. These vulnerabilities allow any user with deployment creation permissions to execute arbitrary commands on worker machines, compromising shared work pools in multi-tenant environments.

prefect CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Weakness type (CWE)

CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

prefect

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Affected systems

Vendors

prefect

Products

prefect

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets2 URLs

By indicator

Full discourse3 posts

Upwind Security MDR@UpwindMDR91d
Disclosure
🚨 CRITICAL - Prefect GitRepository git-flag injection leads to RCE (CVE-2026-5366) Prefect 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the GitRepository storage class. By injecting arbitrary git flags via the commit_sha or directories parameters, an attacker can coerce git operations into executing external programs. Any user with deployment creation permissions can exploit this to run commands on worker machines, turning a workflow deployment into a foothold. Impact is severe in shared or multi-tenant work pools, where a single compromised deployment can lead to cross-tenant compromise and full worker takeover. 👉 Affected: prefect 3.6.23 | Upgrade to No fix yet - treat as suspicious
Post summary
A critical RCE vulnerability (CVE‑2026‑5366) affects Prefect 3.6.23 via git flag injection; the text provides technical details but no PoC, exploit code, patch, or evidence of active exploitation.
0000061
223 followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-5366 Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` p… https://www.cve.org/CVERecord?id=CVE-2026-5366 ----- Traducción: CVE-2026-5366 Pre… http://infoflow.cloud`
Post summary
CVE-2026-5366 impacts Prefect 3.6.23 by allowing remote code execution through improper handling of `commit_sha` input in the GitRepository storage class.
0000026
88 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-5366 Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` p… https://www.cve.org/CVERecord?id=CVE-2026-5366
Post summary
The post announces CVE-2026-5366, a remote code execution flaw in Prefect 3.6.23 caused by improper handling of user‑controlled input in the `GitRepository` storage class.
00000241
57.7K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	prefect	prefect	3.6.23	-	-

Explore more

Back to dashboard prefect CVEs prefect vulnerabilities