CVE-2026-72538: Prefecthq Prefect

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step branch field. The branch parameter is passed directly to git pull without sanitization, enabling injection of arbitrary git arguments. This represents a distinct code path from the incomplete fix applied for CVE-2026-5366 and allows command execution on the Prefect server.

Affected products

• Prefecthq Prefect: up to and including 3.8.2

Published 2026-08-11. Last modified 2026-09-03.