https://feed.craftedsignal.io/vendors/prefab/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 01 Nov 2026 18:57:08 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-prefab-ui-rce/Sun, 01 Nov 2026 18:57:08 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-prefab-ui-rce/Prefab UI versions 0.14.0 through 0.20.2 contain a sandbox escape vulnerability where caller-supplied Python code executed in a Deno subprocess can access unrestricted filesystem and network permissions via the exposed Deno API.The Prefab UI Generative UI feature utilizes a Deno subprocess to execute Pyodide-based Python code. In versions 0.14.0 through 0.20.2, this subprocess is initiated with unrestricted --allow-read, --allow-write, and --allow-net permissions. Because the Deno API remains available on the JavaScript global object, the Python sandbox can invoke privileged functions such as Deno.readTextFileSync and Deno.writeTextFileSync. An attacker providing code through the generate_prefab_ui tool can read/write files as the server OS user or achieve code execution persistence by creating .pth files in the server's virtual environment.

]]>criticaladvisory