Skip to contentApache Software Foundation Airflow vulnerabilities
- apache airflowApache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartextCVE-2026-68969Fix available6.5 Medium
- apache airflowApache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UICVE-2026-68970Fix available6.5 Medium
- apache airflowApache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpointsCVE-2026-68971Fix available6.5 Medium
- apache airflowApache Airflow: Connections test API: team-scope guard bypass resolves another team's environment ConnectionCVE-2026-68076Fix available5.4 Medium
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 moreApache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and VariablesCVE-2026-68868Fix available6.5 Medium
- apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 moreApache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-68872Fix available6.5 Medium
- apache software foundation airflow yandex provider, apache apache-airflow-providers-apache-yandex +1 moreApache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-68871Fix available6.5 Medium
- apache software foundation airflow microsoft azure providerApache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-688705.3 Medium
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)CVE-2026-59243Public exploit9.8 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)CVE-2026-592458.1 High
- apache apache-airflow-providers-git, apache software foundation airflow git provider +1 moreApache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verificationCVE-2026-580658.1 High
- apache airflowApache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()CVE-2026-33264Fix available9.8 Critical
- apache airflowApache Airflow: Task-instance API exposes secrets in deferred trigger kwargsCVE-2026-49487Fix available6.5 Medium
- apache airflowApache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the keyCVE-2026-48828Fix available6.5 Medium
- apache airflowApache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}CVE-2026-49296Fix available6.5 Medium
- apache airflowApache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.targetCVE-2026-48891Fix available4.3 Medium
- apache airflowApache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic optionsCVE-2026-48892Fix available6.5 Medium
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 moreApache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)CVE-2026-49297Fix available8.1 High
- apache apache-airflow-providers-ftp, apache software foundation airflow ftp provider +1 moreApache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)CVE-2026-49486Fix available7.5 High
- apache apache-airflow-providers-sftp, apache software foundation airflow sftp provider +1 moreApache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry namesCVE-2026-50203Fix available9.1 Critical
- apache apache-airflow-providers-samba, apache software foundation airflow samba provider +1 moreApache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object namesCVE-2026-49818Fix available6.5 Medium
- apache airflowApache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandlerCVE-2026-40861Fix available6.5 Medium
- apache airflowApache Airflow: Open Redirect Bypass VulnerabilityCVE-2026-40961Fix available7.2 High
- apache airflowApache Airflow: DAG authorization bypass on /ui/structure/structure_dataCVE-2026-40963Fix available3.1 Low
- apache airflowApache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpointsCVE-2026-41014Fix available4.3 Medium
- apache airflowApache Airflow: No certificate validation on SMTP STARTTLS connectionsCVE-2026-49267Fix available5.9 Medium
- apache airflowApache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxyCVE-2026-41017Fix available5.9 Medium
- apache airflowApache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutationCVE-2026-41084Fix available7.5 High
- apache airflowApache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user patternCVE-2026-42252Fix available9.1 Critical
- apache airflowApache Airflow: Rendered template truncation bypasses nested sensitive-key maskingCVE-2026-42360Fix available6.5 Medium
- apache airflowApache Airflow: Variable masker depth-limit bypass returns cleartext nested secretsCVE-2026-42358Fix available6.5 Medium
- apache airflowApache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validatorCVE-2026-42359Fix available8.8 High
- apache airflowApache Airflow: Arbitrary import in custom deadline-reference deserializationCVE-2026-45360Fix available7.3 High
- apache airflowApache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log accessCVE-2026-45426Fix available3.1 Low
- apache airflowApache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filterCVE-2026-46764Fix available4.3 Medium
- apache airflowApache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout pathCVE-2026-48726Fix available6.5 Medium
- apache airflowApache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsCVE-2026-49298Fix available8.8 High
- apache airflowApache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API ResponseCVE-2026-45192Fix available6.5 Medium
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/tokenCVE-2026-46745Fix available5.3 Medium
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 moreApache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)CVE-2026-45361Fix available8.1 High
- apache software foundation airflow cncf kubernetes provider, apache apache-airflow-providers-cncf-kubernetes +1 moreApache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsCVE-2026-27173Fix available8.7 High
- apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 moreApache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backendsCVE-2026-42526Fix available5.3 Medium
- apache apache-airflow-providers-elasticsearch, apache software foundation airflow providers elasticsearch +1 moreApache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URLCVE-2026-41018Fix available6.5 Medium
- apache apache-airflow-providers-opensearch, apache software foundation airflow providers opensearch +1 moreApache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URLCVE-2026-43826Fix available6.5 Medium
- apache airflow, apache software foundation airflow providers smtp +1 moreApache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP providerCVE-2026-41016Fix available5.9 Medium
- apache airflowApache Airflow: Dags endpoint might provide access to otherwise inaccessible entitiesCVE-2026-38743Fix available4.3 Medium
- apache airflowApache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized usersCVE-2026-40690Fix available4.3 Medium
- apache apache-airflow-providers-keycloak, apache software foundation airflow providers keycloak +1 moreApache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth ManagerCVE-2026-40948Fix available5.4 Medium
- apache airflowApache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1CVE-2026-32690Fix available3.7 Low
- apache airflowApache Airflow: Bad example of BashOperator shell injection via dag_run.confCVE-2026-30898Fix available8.8 High
- Show moreLoading…