Aller au contenu
en Se connecter
8.5 Élevée

CVE-2026-3515 A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows…

Description

A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the `reference` field. The `reference` field is concatenated directly into a `git clone` command string without proper sanitization, and then parsed by `shlex.split()`. This enables injection of options such as `-c`, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the `aget_directory()` and `get_directory()` methods in `src/integrations/prefect-github/prefect_github/repository.py`. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Produits et versions touchés

Produit Versions touchées Corrigé en
prefecthq/prefect Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de prefecthq/prefect

Les 5 CVE de prefecthq/prefect →
CVE-2026-5366 Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the… 9.9 Critique CVE-2026-3514 In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of… 7.5 Élevée CVE-2024-8183 A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect version 2.20.2 allows unauthorized… 7.6 Élevée CVE-2023-6022 Cross-Site Request Forgery (CSRF) in GitHub repository prefecthq/prefect prior to 2.16.5 8.8 Élevée
Suivre cette CVE