CVE-2026-120338

{
  "etk_id": "ETK-2026-3234",
  "cve_id": "CVE-2026-120338",
  "display_id": "CVE-2026-120338",
  "ghsa_id": "GHSA-3g72-rrqc-f76c",
  "euvd_id": "EUVD-2026-114859",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Generative UI sandbox escape in prefab-ui",
  "summary": "Prefab-ui 0.14.0 through 0.20.2 can expose host file access through its Generative UI Python sandbox. An attacker able to provide code to the Generative UI tool may read or modify files available to the server process and establish persistent execution; the feature must be enabled and Deno must be installed.",
  "mitigation": "Upgrade prefab-ui to version 0.21.0 or later. Until upgraded, disable Generative UI or restrict access to the code-submission tool to trusted, authenticated clients.",
  "vendor": "PrefectHQ",
  "product": "prefab-ui",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0.14.0, < 0.21.0"
      ],
      "ecosystem": "pypi",
      "fixed_versions": [
        "0.21.0"
      ],
      "package_name": "prefab-ui",
      "purl": "pkg:pypi/prefab-ui"
    }
  ],
  "cwes": [
    693
  ],
  "cvss_score": 10,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 10.9001273,
  "t0_at": "2026-11-01T15:24:54.158000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-01T15:24:54.158000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-01T15:24:54.158000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-120338"
    }
  }
}