PT-2026-59588 · Pypi · Prefect

Published 2026-07-13 · Updated 2026-07-13

OSV

CVSS v3.1

8.5

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the aget directory() and get directory() methods in src/integrations/prefect-github/prefect github/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

Fix

Related Identifiers

PYSEC-2026-2957

Affected Products

Prefect

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-3515 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-2957 · Vendor Advisory
• https://github.com/PrefectHQ/prefect · Note
• https://github.com/advisories/GHSA-cw25-2p92-7f75 · Note
• https://huntr.com/bounties/f3b048b8-7f4e-45ef-a5a7-cb841c39acde · Note
• https://pypi.org/project/prefect · Note