{"id":"CVE-2025-69219","aliases":["CLSA-2026-1779670115","EUVD-2025-208401","GHSA-9r5j-7r2x-rv4g","PYSEC-2026-2367"],"status":"published","title":"Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nYou should upgrade to version 6.0.0 of the provider to avoid even that risk.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.00772,"percentile":0.55952,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-913"],"published":"2026-03-09T10:19:58Z","modified":"2026-10-28T02:30:22Z","exploits":[{"source":"pocgithub","id":"ahmetartuc/poc-cve-2025-69219","title":"ahmetartuc/poc-cve-2025-69219","date":"2026-02-11","url":"https://github.com/ahmetartuc/poc-cve-2025-69219"},{"source":"pocgithub","id":"sak110/CVE-2025-69219","title":"sak110/CVE-2025-69219","date":"2026-03-11","url":"https://github.com/sak110/CVE-2025-69219"}],"fixes":[{"ecosystem":"PyPI","package":"apache-airflow-providers-http","fixed_in":["6.0.0"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:PyPI","package":"apache-airflow-providers-http","fixed_in":["4.13.3.post1+tuxcare"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"apache-airflow-providers-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}]},{"source":"osv","ecosystem":"TuxCare:PyPI","package":"apache-airflow-providers-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.13.3"},{"fixed":"4.13.3.post1+tuxcare"}]}],"versions":["4.13.3"]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.1.0","1.1.0rc1","1.1.1","1.1.1rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.1","2.0.1rc1","2.0.2","2.0.2rc1","2.0.3","2.0.3rc1","2.0.3rc2","2.1.0","2.1.0rc1","2.1.1","2.1.1rc1","2.1.2","2.1.2rc1","3.0.0","3.0.0rc1","3.0.0rc2","4.0.0","4.0.0rc1","4.1.0","4.1.0rc1","4.1.1","4.1.1rc1","4.10.0","4.10.0rc1","4.10.1","4.10.1rc1","4.11.0","4.11.0rc1","4.11.1","4.11.1rc1","4.12.0","4.12.0rc1","4.13.0","4.13.0rc1","4.13.1","4.13.1rc1","4.13.2","4.13.2rc1","4.13.3","4.13.3rc1","4.2.0","4.2.0rc1","4.3.0","4.3.0rc1","4.4.0","4.4.0rc1","4.4.0rc2","4.4.1","4.4.1rc1","4.4.2","4.4.2rc1","4.5.0","4.5.0rc1","4.5.1","4.5.1rc1","4.5.2","4.5.2rc1","4.6.0","4.6.0rc1","4.7.0","4.7.0rc1","4.7.0rc2","4.8.0","4.8.0rc1","4.9.0","4.9.0rc1","4.9.0rc2","4.9.1","4.9.1rc1","5.0.0","5.0.0rc1","5.0.0rc2","5.1.0","5.2.0","5.2.0rc1","5.2.1","5.2.1rc1","5.2.2","5.2.2rc1","5.3.0","5.3.0rc1","5.3.1","5.3.1rc1","5.3.2","5.3.2rc1","5.3.3","5.3.3rc1","5.3.4","5.3.4rc1","5.4.0","5.4.0rc1","5.5.0","5.5.0rc1","5.6.0","5.6.0rc1","5.6.1","5.6.1rc1","5.6.2","5.6.2rc1","5.6.3","5.6.3rc1","5.6.4","5.6.4rc1","6.0.0rc1"]},{"source":"osv","ecosystem":"PyPI","package":"apache-airflow-providers-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.0"}]}],"versions":["1.0.0","1.0.0b1","1.0.0b2","1.0.0rc1","1.1.0","1.1.0rc1","1.1.1","1.1.1rc1","2.0.0","2.0.0rc1","2.0.0rc2","2.0.1","2.0.1rc1","2.0.2","2.0.2rc1","2.0.3","2.0.3rc1","2.0.3rc2","2.1.0","2.1.0rc1","2.1.1","2.1.1rc1","2.1.2","2.1.2rc1","3.0.0","3.0.0rc1","3.0.0rc2","4.0.0","4.0.0rc1","4.1.0","4.1.0rc1","4.1.1","4.1.1rc1","4.10.0","4.10.0rc1","4.10.1","4.10.1rc1","4.11.0","4.11.0rc1","4.11.1","4.11.1rc1","4.12.0","4.12.0rc1","4.13.0","4.13.0rc1","4.13.1","4.13.1rc1","4.13.2","4.13.2rc1","4.13.3","4.13.3rc1","4.2.0","4.2.0rc1","4.3.0","4.3.0rc1","4.4.0","4.4.0rc1","4.4.0rc2","4.4.1","4.4.1rc1","4.4.2","4.4.2rc1","4.5.0","4.5.0rc1","4.5.1","4.5.1rc1","4.5.2","4.5.2rc1","4.6.0","4.6.0rc1","4.7.0","4.7.0rc1","4.7.0rc2","4.8.0","4.8.0rc1","4.9.0","4.9.0rc1","4.9.0rc2","4.9.1","4.9.1rc1","5.0.0","5.0.0rc1","5.0.0rc2","5.1.0","5.2.0","5.2.0rc1","5.2.1","5.2.1rc1","5.2.2","5.2.2rc1","5.3.0","5.3.0rc1","5.3.1","5.3.1rc1","5.3.2","5.3.2rc1","5.3.3","5.3.3rc1","5.3.4","5.3.4rc1","5.4.0","5.4.0rc1","5.5.0","5.5.0rc1","5.6.0","5.6.0rc1","5.6.1","5.6.1rc1","5.6.2","5.6.2rc1","5.6.3","5.6.3rc1","5.6.4","5.6.4rc1","6.0.0rc1"]}],"products":[{"vendor":"apache","product":"airflow_providers_http"},{"vendor":"apache software foundation","product":"apache airflow providers http"}],"references":[{"url":"https://github.com/apache/airflow/pull/61662","tags":["patch","Issue Tracking","Patch","fix","web"]},{"url":"https://lists.apache.org/thread/zjkfb2njklro68tqzym092r4w65m5dq0","tags":["vendor-advisory","Mailing List","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/09/1","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-69219","tags":["advisory"]},{"url":"https://github.com/apache/airflow/commit/97839f7b0a8ae66d6079bb7fad5a363068f61617","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9r5j-7r2x-rv4g","tags":["advisory"]},{"url":"https://pypi.python.org","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69219.json","tags":["advisory"]},{"url":"https://github.com/apache/airflow","tags":["package"]},{"url":"https://pypi.org/project/apache-airflow-providers-http","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-69219","title":"Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nYou should upgrade to version 6.0.0 of the provider to avoid even that risk.","status":"published","published":"2026-03-09T10:19:58.034Z","modified":"2026-03-10T03:55:27.322Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-913"],"updated_at":"2026-11-02T14:32:41.089134Z"}],"euvd":[{"id":"EUVD-2025-208401","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nYou should upgrade to version 6.0.0 of the provider to avoid even that risk.","status":"published","published":"2026-03-09T10:19:58Z","modified":"2026-03-10T03:55:27Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:06.014236Z"}],"ghsa":[{"id":"GHSA-9r5j-7r2x-rv4g","title":"Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nUsers should upgrade to version 6.0.0 of the provider to avoid even that risk.","status":"published","published":"2026-03-09T12:31:38Z","modified":"2026-03-10T01:21:25Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-913"],"updated_at":"2026-11-02T14:39:33.538417Z"}],"nvd":[{"id":"CVE-2025-69219","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nYou should upgrade to version 6.0.0 of the provider to avoid even that risk.","status":"published","published":"2026-03-09T11:16:05.907Z","modified":"2026-06-17T10:00:18.717Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-913"],"updated_at":"2026-11-02T14:12:01.096037Z"}],"osv":[{"id":"CVE-2025-69219","title":"Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nYou should upgrade to version 6.0.0 of the provider to avoid even that risk.","status":"published","published":"2026-03-09T10:19:58.034Z","modified":"2026-10-28T02:30:22.262169148Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-913"],"updated_at":"2026-11-02T15:44:52.859856Z"},{"id":"GHSA-9r5j-7r2x-rv4g","title":"Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nUsers should upgrade to version 6.0.0 of the provider to avoid even that risk.","status":"published","published":"2026-03-09T12:31:38Z","modified":"2026-09-10T03:50:38.554115249Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-913"],"updated_at":"2026-11-02T15:46:44.225359Z"},{"id":"PYSEC-2026-2367","title":"Apache Airflow Providers Http has Unsafe Pickle Deserializatio leading to RCE via HttpOperator","description":"A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.\n\nUsers should upgrade to version 6.0.0 of the provider to avoid even that risk.","status":"published","published":"2026-07-13T14:36:41.593863Z","modified":"2026-07-13T16:31:27.849809465Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"CLSA-2026-1779670115","title":"TuxCare security update for apache-airflow-providers-http (1 CVE)","description":"TuxCare rebuilt apache-airflow-providers-http to address 1 CVE. Fixed in 4.13.3.post1+tuxcare.","status":"published","published":"2026-08-04T14:52:33Z","modified":"2026-10-15T09:48:01.170006076Z","updated_at":"2026-11-02T15:43:45.090939Z"}]}}