Your Prefab UI Upgrade Won't Remove Files Attackers Already Wrote
A FastMCP server running GenerativeUI on prefab-ui 0.14.0 through 0.20.2 lets a client read and write host files. Version 0.21.0 fixes it, but earlier writes stay, so inspect .pth files before you upgrade.
November 1, 2026 · 9 min read