An argument injection vulnerability in PrefectHQ Prefect through version 3.8.2 allows authenticated attackers to execute arbitrary code on the underlying system.

This is an argument injection vulnerability (CWE-88) occurring within the git_clone pull step. Authenticated users can inject arbitrary arguments into the git pull command because the branch parameter is passed to the shell without sufficient sanitization.

The ability to achieve remote code execution (RCE) with a CVSS score of 8.8 makes this a severe risk for users of Prefect. An attacker could gain full control over the execution environment, potentially accessing secrets, sensitive workflow data, or pivoting further into the internal network.

Immediate Action: Update Prefect to a version beyond 3.8.2. If an update is not immediately available, disable the use of the git_clone pull step if possible.

Proactive Monitoring: Review workflow definitions and logs for suspicious inputs provided to the branch field of git_clone steps.

Compensating Controls: Ensure that the service running Prefect operates with the principle of least privilege, minimizing the damage an attacker can do if they successfully achieve code execution.

Public Exploit Available: No (unknown)

Remote code execution vulnerabilities in automation and orchestration platforms are extremely dangerous. Organizations should prioritize updating their Prefect deployments immediately to eliminate the injection vector and protect against potential unauthorized command execution.