{"id":"CVE-2022-38362","aliases":["EUVD-2022-6497","GHSA-746v-hfh2-xphm","PYSEC-2026-773"],"status":"published","title":"Docker Provider \u003c3.0 RCE vulnerability in example dag","description":"Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01953,"percentile":0.80401,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-08-16T14:10:09Z","modified":"2026-07-07T11:56:47Z","fixes":[{"ecosystem":"PyPI","package":"apache-airflow-providers-docker","fixed_in":["3.0.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"apache-airflow-providers-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.0.1","1.0.1rc1","1.0.2","1.0.2rc1","1.1.0","1.1.0rc1","1.2.0","1.2.0rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.1.0","2.1.0rc1","2.1.0rc2","2.1.1","2.1.1rc1","2.2.0","2.2.0rc1","2.3.0","2.3.0rc1","2.4.0","2.4.0rc1","2.4.1","2.4.1rc1","2.4.1rc2","2.5.0","2.5.0rc1","2.5.1","2.5.1rc1","2.5.2","2.5.2rc1","2.6.0","2.6.0rc1","2.7.0","2.7.0rc1","3.0.0rc1","3.0.0rc2"]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.0.1","1.0.1rc1","1.0.2","1.0.2rc1","1.1.0","1.1.0rc1","1.2.0","1.2.0rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.1.0","2.1.0rc1","2.1.0rc2","2.1.1","2.1.1rc1","2.2.0","2.2.0rc1","2.3.0","2.3.0rc1","2.4.0","2.4.0rc1","2.4.1","2.4.1rc1","2.4.1rc2","2.5.0","2.5.0rc1","2.5.1","2.5.1rc1","2.5.2","2.5.2rc1","2.6.0","2.6.0rc1","2.7.0","2.7.0rc1","3.0.0rc1","3.0.0rc2"]}],"products":[{"vendor":"apache","product":"apache-airflow-providers-docker"},{"vendor":"apache software foundation","product":"apache airflow"}],"references":[{"url":"https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb","tags":["x_refsource_MISC","x_transferred","Mailing List","Vendor Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/08/16/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38362","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-746v-hfh2-xphm","tags":["advisory"]},{"url":"https://pypi.org/project/apache-airflow-providers-docker","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2022-38362","title":"Docker Provider \u003c3.0 RCE vulnerability in example dag","description":"Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.","status":"published","published":"2022-08-16T14:10:09Z","modified":"2024-08-03T10:54:03.738Z","updated_at":"2026-11-02T14:34:37.272373Z"}],"euvd":[{"id":"EUVD-2022-6497","description":"Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.","status":"published","published":"2022-08-16T14:10:09Z","modified":"2024-08-03T10:54:03Z","updated_at":"2026-11-03T03:25:22.392967Z"}],"ghsa":[{"id":"GHSA-746v-hfh2-xphm","title":"Remote code execution in Apache Airflow Docker's Provider","description":"Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above.","status":"published","published":"2022-08-17T00:00:21Z","modified":"2023-04-13T17:53:43Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:36:50.476488Z"}],"nvd":[{"id":"CVE-2022-38362","description":"Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.","status":"published","published":"2022-08-16T14:15:08.31Z","modified":"2026-06-17T04:56:28.167Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:25.242752Z"}],"osv":[{"id":"GHSA-746v-hfh2-xphm","title":"Remote code execution in Apache Airflow Docker's Provider","description":"Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above.","status":"published","published":"2022-08-17T00:00:21Z","modified":"2026-07-07T11:56:47.874726932Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:40.308826Z"},{"id":"PYSEC-2026-773","title":"Remote code execution in Apache Airflow Docker's Provider","description":"Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above.","status":"published","published":"2026-07-06T08:03:32.004381Z","modified":"2026-07-07T11:45:36.919909135Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"}]}}