Exploit for CVE-2026-5366

githubexploit · 2026-06-27

Description

Exploit note for CVE-2026-5366: Git argument injection in Prefect GitRepository, PoC

Affected Prefect versions

Prefect= 3.6.23

All known vulnerabilities by product

Prefect

CVSS 9.9 for CVE-2026-5366

9.9

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

33%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

0.9%higher than 55.8% of all CVEs

Updated 2026-08-24

CVE Information

CVE-2026-5366

Exploit Details

Modified:2026-06-27 13:16

Last Seen:2026-06-27 13:22

Reporter:renat0z3r0

Repository:No longer on GitHub

Other exploits for CVE-2026-5366

prefect-cve-2026-5366

2026-08-24 KitPloitKITPLOIT

New release PoC-in-GitHub

2026-07-25 KitPloitKITPLOIT

Exploit for CVE-2026-5366

2026-06-27 renat0z3r0GITHUB

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=DE5C5932-5273-5F56-9465-2C4CB0B31BAF
# CVE-2026-5366
PoC: CVE-2026-5366 — Git Argument Injection in Prefect (GitRepository)

Exploit Code

Share

Share on social media: