CVE-2026-3515: Argument Injection in prefecthq/prefect
A vulnerability in the GitHubRepository block of the prefect-github integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the reference field. The reference field is concatenated directly into a git clone command string without proper sanitization, and then parsed by shlex.split(). This enables injection of options such as -c, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the agetdirectory() and getdirectory() methods in src/integrations/prefect-github/prefectgithub/repository.py. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3515?
The severity of CVE-2026-3515 is rated high with a score of 8.5.
How does CVE-2026-3515 affect the GitHub integration in Prefect?
CVE-2026-3515 allows an attacker to inject arbitrary git command-line options via the reference field in the GitHubRepository block.
What kind of attacks could be performed due to CVE-2026-3515?
Exploitation of CVE-2026-3515 could lead to unauthorized git commands being executed, which may compromise system integrity.
How do I fix CVE-2026-3515?
To fix CVE-2026-3515, update to the latest version of Prefect that addresses this vulnerability.
Is CVE-2026-3515 related to server-side request forgery (SSRF)?
Yes, CVE-2026-3515 is categorized under SSRF vulnerabilities due to its nature of manipulating command execution.