AIKIDO-2026-173269
prefect is vulnerable to Path Traversal
59
Medium Risk
This Affects:
prefectTL;DR
RemoteFileSystem blocks resolve user-supplied paths through _resolve_path before reading from or writing to the configured fsspec backend. The method only enforces base-path containment when a path carries a matching network location and never rejects dot-segment (..) traversal, backslash separators, or percent-encoded variants, so a resolved path can escape the configured basepath. An actor who can influence the paths passed to filesystem operations can read or write objects outside the intended storage prefix. The fix rebuilds absolute URLs from the configured scheme and netloc, rejects traversal sequences and sibling-prefix spoofs, and enforces strict containment for every resolved path.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and use a RemoteFileSystem block with paths derived from untrusted input.
Background info
prefect is vulnerable to Path Traversal in versions 2.0.0 - 3.7.8.
How to fix this
Upgrade the prefect and/or the prefect-client library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant