CVE-2026-3515

A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the `reference` field. The `reference` field is concatenated directly into a `git clone` command string without proper sanitization, and then parsed by `shlex.split()`. This enables injection of options such as `-c`, leading to potential Server-Side Request Forgery (SSRF), credential theft, or remote code execution (RCE). The vulnerability affects both the `aget_directory()` and `get_directory()` methods in `src/integrations/prefect-github/prefect_github/repository.py`. This issue does not affect the GitLab and BitBucket integrations, which use a safer list-based command construction approach.

• CWE-88

• https://huntr.com/bounties/f3b048b8-7f4e-45ef-a5a7-cb841c39acde

Published

May 24, 2026

Last Modified

Jul 23, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-35143HCL DFXAnalytics is affected by a Missing SameSite Attribute…6.5
• CVE-2026-35145HCL DFXAnalytics is affected by a Missing HTTP Strict-Transp…3.1
• CVE-2026-35146HCL DFXServer is affected by an Unencrypted Communication vu…6.3
• CVE-2026-35147HCL DFXServer is affected by a Broken Authentication vulnera…8.2
• CVE-2026-35148HCL DFXServer is affected by a Missing Access Control vulner…6.3
• CVE-2026-35149HCL DFXServer is affected by an Authentication Bypass vulner…8.2
• CVE-2026-35152A SQL Injection vulnerability exists in Apache Fineract's Re…8.8
• CVE-2026-35153Dell PowerProtect Data Domain Feature Release versions 7.7.1…6.7
• CVE-2026-35154Dell PowerProtect Data Domain Feature Release versions 7.7.1…6.7
• CVE-2026-35155Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains a…7.1
• CVE-2026-35157Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectSca…9.8
• CVE-2026-35159Dell Client Platform BIOS contains an Authentication Bypass …5.3