PT-2026-36752

CVE-2026-7722

·

Published

2026-05-04

·

Updated

2026-07-22

Description by

CVSS 4.0
5.5
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Name of the Vulnerable Software and Affected Versions PrefectHQ prefect versions prior to 3.6.22
Description Improper authentication in the Health Check API allows a remote attacker to perform a manipulation. This issue specifically impacts the endswith() function within the '/api/health' endpoint.
Recommendations Update to version 3.6.22.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-287: Improper Authentication
Related identifiers
CVE-2026-7722
GHSA-6RR6-V7CJ-MXPG
PYSEC-2026-2956
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com