Prefab UI's Generative UI sandbox allowed execution of caller-supplied Python code with excessive permissions in Deno subprocesses, enabling arbitrary file read/write and persistent code execution on the server. This affected versions from 0.14.0 through 0.20.2. The vulnerability was fixed in version 0.21.0 by revoking Deno permissions before code execution and restricting network access.