{"id":"CVE-2023-35798","aliases":["EUVD-2023-1863","GHSA-q57w-826p-46jr","PYSEC-2026-1150","PYSEC-2026-2370"],"status":"published","title":"Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01263,"percentile":0.69871,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2023-06-27T11:39:51Z","modified":"2026-10-28T02:30:30Z","fixes":[{"ecosystem":"PyPI","package":"apache-airflow-providers-odbc","fixed_in":["4.0.0"],"sources":["ghsa","osv"]},{"ecosystem":"PyPI","package":"apache-airflow-providers-microsoft-mssql","fixed_in":["3.4.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"apache-airflow-providers-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"apache-airflow-providers-microsoft-mssql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.0.1","1.0.1rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.1","2.0.1rc1","2.0.2","2.0.2rc1","2.0.3","2.0.3rc1","2.0.4","2.0.4rc1","3.0.0","3.0.0rc1","3.0.0rc2","3.1.0","3.1.0rc1","3.1.1","3.1.1rc1","3.1.1rc2","3.1.1rc3","3.1.2","3.1.2rc1","3.2.0","3.2.0rc1","3.2.1","3.2.1rc2","3.2.1rc3","3.3.0","3.3.0rc1","3.3.0rc2","4.0.0rc1"]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-microsoft-mssql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.0.1","1.0.1rc1","1.1.0","1.1.0rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.1","2.0.1rc1","2.1.0","2.1.0rc1","2.1.0rc2","2.1.1","2.1.1rc1","2.1.2","2.1.2rc1","2.1.3","2.1.3rc1","3.0.0","3.0.0rc1","3.0.0rc2","3.1.0","3.1.0rc1","3.2.0","3.2.0rc1","3.2.0rc2","3.2.0rc3","3.2.1","3.2.1rc1","3.3.0","3.3.0rc1","3.3.1","3.3.1rc2","3.3.1rc3","3.3.2","3.3.2rc1","3.3.2rc2","3.4.0","3.4.0rc1","3.4.0rc2","3.4.1rc1"]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-microsoft-mssql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.1"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.0.1","1.0.1rc1","1.1.0","1.1.0rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.1","2.0.1rc1","2.1.0","2.1.0rc1","2.1.0rc2","2.1.1","2.1.1rc1","2.1.2","2.1.2rc1","2.1.3","2.1.3rc1","3.0.0","3.0.0rc1","3.0.0rc2","3.1.0","3.1.0rc1","3.2.0","3.2.0rc1","3.2.0rc2","3.2.0rc3","3.2.1","3.2.1rc1","3.3.0","3.3.0rc1","3.3.1","3.3.1rc2","3.3.1rc3","3.3.2","3.3.2rc1","3.3.2rc2","3.4.0","3.4.0rc1","3.4.0rc2","3.4.1rc1"]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-odbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.0.0"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.0.1","1.0.1rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.1","2.0.1rc1","2.0.2","2.0.2rc1","2.0.3","2.0.3rc1","2.0.4","2.0.4rc1","3.0.0","3.0.0rc1","3.0.0rc2","3.1.0","3.1.0rc1","3.1.1","3.1.1rc1","3.1.1rc2","3.1.1rc3","3.1.2","3.1.2rc1","3.2.0","3.2.0rc1","3.2.1","3.2.1rc2","3.2.1rc3","3.3.0","3.3.0rc1","3.3.0rc2","4.0.0rc1"]}],"products":[{"vendor":"apache","product":"apache-airflow-providers-microsoft-mssql"},{"vendor":"apache","product":"apache-airflow-providers-odbc"},{"vendor":"apache software foundation","product":"apache airflow mssql provider"},{"vendor":"apache software foundation","product":"apache airflow odbc provider"}],"references":[{"url":"https://github.com/apache/airflow/pull/31984","tags":["patch","x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://lists.apache.org/thread/951rb9m7wwox5p30tdvcfjxq8j1mp4pj","tags":["vendor-advisory","x_transferred","Mailing List","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35798","tags":["advisory"]},{"url":"https://github.com/apache/airflow/commit/b6836986846058e9e5fa271fb7b22ae721020787","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q57w-826p-46jr","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/35xxx/CVE-2023-35798.json","tags":["advisory"]},{"url":"https://github.com/apache/airflow","tags":["package"]},{"url":"https://pypi.org/project/apache-airflow-providers-microsoft-mssql","tags":["package"]},{"url":"https://pypi.org/project/apache-airflow-providers-odbc","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2023-35798","title":"Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2023-06-27T11:39:51.759Z","modified":"2024-10-07T18:25:05.749Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:33.794347Z"}],"euvd":[{"id":"EUVD-2023-1863","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2023-06-27T11:39:51Z","modified":"2024-10-07T18:25:05Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"none"}],"updated_at":"2026-11-03T00:27:46.330731Z"}],"ghsa":[{"id":"GHSA-q57w-826p-46jr","title":"Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2023-06-27T12:30:42Z","modified":"2023-11-10T05:01:43Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:37:18.40412Z"}],"nvd":[{"id":"CVE-2023-35798","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2023-06-27T12:15:13.34Z","modified":"2026-06-17T06:05:14.01Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:08:14.715708Z"}],"osv":[{"id":"GHSA-q57w-826p-46jr","title":"Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2023-06-27T12:30:42Z","modified":"2026-07-13T16:43:35.796100897Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:46:54.055966Z"},{"id":"PYSEC-2026-1150","title":"Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2026-07-07T11:45:19.357379Z","modified":"2026-07-13T16:43:35.796100897Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"},{"id":"PYSEC-2026-2370","title":"Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2026-07-13T14:20:01.340362Z","modified":"2026-07-13T16:43:35.796100897Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"CVE-2023-35798","title":"Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability","description":"Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it.\n\nThis issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.\n\nIt is recommended to upgrade to a version that is not affected\n\n","status":"published","published":"2023-06-27T11:39:51.759Z","modified":"2026-10-28T02:30:30.169942503Z","cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:32.510144Z"}]}}