Skip to contentApache Software Foundation Airflow vulnerabilities
- apache airflowApache Airflow: Exposing stack trace in case of constraint errorCVE-2026-30912Fix available7.5 High
- apache airflowApache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)CVE-2026-25917Fix available7.2 High
- apache airflowApache Airflow: Users with asset materialization permisssions could trigger Dags they had no access toCVE-2026-32228Fix available7.5 High
- apache airflowApache Airflow: JWT token appearing in logsCVE-2026-31987Fix available7.5 High
- apache airflowApache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view accessCVE-2026-25219Fix available6.5 Medium
- apache airflowApache Airflow: RCE by race condition in example_xcom dagCVE-2025-54550Fix available8.1 High
- apache airflowApache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom APICVE-2026-33858Fix available8.8 High
- apache airflowApache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UICVE-2025-66236Fix available7.5 High
- apache airflowApache Airflow: Airflow Logout Not Invalidating JWTCVE-2025-57735Fix available9.1 Critical
- apache airflowApache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)CVE-2026-34538Fix available6.5 Medium
- apache software foundation airflow provider for databricks, apache airflow providers databricks +1 moreApache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token ExchangeCVE-2026-32794Public exploitFix available4.8 Medium
- apache airflowApache Airflow: DAG authorization bypassCVE-2026-28563Fix available4.3 Medium
- apache airflowApache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks MetadataCVE-2026-26929Fix available6.5 Medium
- apache airflowApache Airflow: Execution API HITL Endpoints Missing Per-Task AuthorizationCVE-2026-30911Fix available8.1 High
- apache airflowApache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applicationsCVE-2026-28779Fix available7.5 High
- apache apache-airflow-providers-amazon, apache software foundation airflow providers amazon +1 moreApache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication BypassCVE-2026-25604Public exploitFix available5.4 Medium
- apache airflow providers httpApache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperatorCVE-2025-69219Public exploitFix available8.8 High
- apache airflowApache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cliCVE-2025-27555Fix available6.5 Medium
- apache airflowApache Airflow: SSTI to Code Execution in Airflow through Shared DB InformationCVE-2024-56373Fix available8.4 High
- apache airflowApache Airflow: Disclosure of secrets to UI via kwargsCVE-2025-65995Fix available6.5 Medium
- apache airflowApache Airflow: Airflow externalLogUrl Permission BypassCVE-2026-22922Fix available6.5 Medium
- apache airflowApache Airflow: Assigning single DAG permission leaked all DAGs Import ErrorsCVE-2026-24098Fix available6.5 Medium
- apache airflowApache Airflow: proxy credentials for various providers might leak in task logsCVE-2025-68675Fix available7.5 High
- apache airflowApache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncatedCVE-2025-68438Fix available7.5 High
- apache software foundation airflow providers edge3, apache apache-airflow-providers-edge3 +1 moreApache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2CVE-2025-67895Fix available9.8 Critical
- apache airflowApache Airflow: Secrets in rendered templates not redacted properly and exposed in the UICVE-2025-66388Fix available6.5 Medium
- apache airflowApache Airflow: Command injection in "example_dag_decorator"CVE-2025-54941Fix available4.6 Medium
- apache airflowApache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in APICVE-2025-62402Fix available5.4 Medium
- apache airflowApache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)CVE-2025-62503Fix available4.6 Medium
- apache airflowApache Airflow: Connection sensitive details exposed to users with READ permissionsCVE-2025-54831Fix available6.5 Medium
- apache software foundation airflow providers snowflake, apache apache-airflow-providers-snowflake +1 moreApache Airflow Providers Snowflake: Potential SQL injection in CopyFromExternalStageToSnowflakeOperatorCVE-2025-50213Fix available9.8 Critical
- apache airflow common sql providerApache Airflow Common SQL Provider: Remote Code Execution via Sql InjectionCVE-2025-30473Fix available8.8 High
- apache software foundation airflow mysql provider, apache apache-airflow-providers-mysql +1 moreApache Airflow MySQL Provider: SQL injection in MySQL provider core functionCVE-2025-27018Fix available6.3 Medium
- apache software foundation airflow fab provider, apache apache-airflow-providers-fab +1 moreApache Airflow Fab Provider: Application does not invalidate session after password change via Airflow cliCVE-2024-45033Fix available8.1 High
- apache airflowApache Airflow: Sensitive configuration values are not masked in the logs by defaultCVE-2024-45784Fix available7.5 High
- apache airflowApache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cliCVE-2024-50378Fix available4.9 Medium
- apache airflowApache Airflow: Authenticated DAG authors could execute code on scheduler nodesCVE-2024-45034Fix available8.8 High
- apache airflowApache Airflow: Command Injection in an example DAGCVE-2024-45498Fix available8.8 High
- apache airflowApache Airflow: Stored XSS Vulnerability on provider linkCVE-2024-41937Fix available6.1 Medium
- apache software foundation airflow providers fab, apache apache-airflow-providers-fab +1 moreApache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for AirflowCVE-2024-42447Fix available9.8 Critical
- apache airflowApache Airflow: DAG Author Code Execution possibility in airflow-schedulerCVE-2024-39877Fix available8.8 High
- apache airflowApache Airflow: Potential XSS VulnerabilityCVE-2024-39863Fix available5.4 Medium
- apache airflowApache Airflow: Cache Control - Storage of Sensitive Data in Browser CacheCVE-2024-25142Fix available5.5 Medium
- apache airflowApache Airflow: XSS vulnerability in Task Instance Log/Log DetailsCVE-2024-32077Fix available5.4 Medium
- apache airflow, apache software foundation airflow ftp provider, apache apache-airflow-providers-ftp +2 moreApache Airflow FTP Provider: FTP_TLS instance with unverified SSL contextCVE-2024-29733Fix available2.7 Low
- apache airflowApache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config usedCVE-2024-31869Fix available4.3 Medium
- apache airflowApache Airflow: Potentially harmful permission changing by log task handlerCVE-2024-29735Fix available5.3 Medium
- apache airflowApache Airflow: Ignored Airflow PermissionsCVE-2024-28746Fix available8.1 High
- apache airflowApache Airflow: Overly broad default permissions for Viewer/Ops (audit logs)CVE-2024-26280Fix available4.7 Medium
- apache airflowApache Airflow: Dag Code and Import Error Permissions IgnoredCVE-2024-27906Fix available5.9 Medium
- Show moreLoading…