{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/prefab-ui-0.14.0---0.20.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:prefab:prefab_ui:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-120338"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["prefab-ui (0.14.0 - 0.20.2)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Prefab"],"content_html":"\u003cp\u003eThe Prefab UI Generative UI feature utilizes a Deno subprocess to execute Pyodide-based Python code. In versions 0.14.0 through 0.20.2, this subprocess is initiated with unrestricted \u003ccode\u003e--allow-read\u003c/code\u003e, \u003ccode\u003e--allow-write\u003c/code\u003e, and \u003ccode\u003e--allow-net\u003c/code\u003e permissions. Because the Deno API remains available on the JavaScript global object, the Python sandbox can invoke privileged functions such as \u003ccode\u003eDeno.readTextFileSync\u003c/code\u003e and \u003ccode\u003eDeno.writeTextFileSync\u003c/code\u003e. An attacker providing code through the \u003ccode\u003egenerate_prefab_ui\u003c/code\u003e tool can read/write files as the server OS user or achieve code execution persistence by creating \u003ccode\u003e.pth\u003c/code\u003e files in the server's virtual environment.\u003c/p\u003e\n","date_modified":"2026-11-01T18:57:08Z","date_published":"2026-11-01T18:57:08Z","id":"https://feed.craftedsignal.io/briefs/2026-11-prefab-ui-rce/","summary":"Prefab UI versions 0.14.0 through 0.20.2 contain a sandbox escape vulnerability where caller-supplied Python code executed in a Deno subprocess can access unrestricted filesystem and network permissions via the exposed Deno API.","title":"Prefab UI: Arbitrary code execution via Generative UI sandbox (CVE-2026-120338)","url":"https://feed.craftedsignal.io/briefs/2026-11-prefab-ui-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Prefab-Ui (0.14.0 - 0.20.2)","version":"https://jsonfeed.org/version/1.1"}