Skip to content
Apache Airflow vulnerabilities
-
apache apache-airflow-providers-teradata, apache software foundation airflow teradata provider +1 more
Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag
CVE-2026-86843
6.3 Medium
-
apache apache-airflow-providers-snowflake, apache software foundation airflow snowflake provider +1 more
Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain
CVE-2026-81930
Fix available
6.3 Medium
-
apache apache-airflow-providers-teradata, apache software foundation airflow teradata provider +1 more
Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logs
CVE-2026-81862
6.5 Medium
-
apache apache-airflow-providers-google, apache software foundation airflow google provider +1 more
Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names
CVE-2026-81914
Fix available
4.3 Medium
-
apache airflow
Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry
CVE-2026-86473
Fix available
9.1 Critical
-
apache airflow
Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter
CVE-2026-75158
Fix available
4.3 Medium
-
apache airflow
Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation
CVE-2026-82355
Fix available
4.2 Medium
-
apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 more
Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated
CVE-2026-86466
8.1 High
-
apache apache-airflow-providers-keycloak, apache software foundation airflow keycloak provider +1 more
Apache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWT
CVE-2026-76187
9.8 Critical
-
apache apache-airflow-providers-keycloak, apache software foundation airflow keycloak provider +1 more
Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity
CVE-2026-76186
9.1 Critical
-
apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 more
Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access
CVE-2026-82310
7.2 High
-
apache apache-airflow-providers-apache-kafka, apache software foundation airflow apache kafka provider +1 more
Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration
CVE-2026-86792
Fix available
8.8 High
-
apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 more
Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions
CVE-2026-86462
9.1 Critical
-
apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 more
Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false
CVE-2026-82311
9.8 Critical
-
apache apache-airflow-providers-akeyless, apache software foundation airflow akeyless provider +1 more
Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key
CVE-2026-86465
6.5 Medium
-
apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 more
Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
CVE-2026-75156
9.1 Critical
-
apache airflow
Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UI
CVE-2026-59244
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables DAG-author RCE on Scheduler / API Server
CVE-2026-58076
Fix available
8.8 High
-
apache airflow
Apache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpoint
CVE-2026-59242
Fix available
5.4 Medium
-
apache airflow
Apache Airflow: Airflow Variables were not masked in the UI for authenticated users
CVE-2026-54183
Fix available
4.3 Medium
-
apache airflow
Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization
CVE-2026-67260
Fix available
7.3 High
-
apache airflow
Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget
CVE-2026-67587
Fix available
8.8 High
-
apache airflow
Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)
CVE-2026-65017
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id
CVE-2026-68968
Fix available
7.5 High
-
apache airflow
Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext
CVE-2026-68969
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UI
CVE-2026-68970
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints
CVE-2026-68971
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection
CVE-2026-68076
Fix available
5.4 Medium
-
apache apache-airflow-providers-google, apache software foundation airflow google provider +1 more
Apache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and Variables
CVE-2026-68868
Fix available
6.5 Medium
-
apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 more
Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable
CVE-2026-68872
Fix available
6.5 Medium
-
apache software foundation airflow yandex provider, apache apache-airflow-providers-apache-yandex +1 more
Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable
CVE-2026-68871
Fix available
6.5 Medium
-
apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 more
Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)
CVE-2026-59243
Public exploit
9.8 Critical
-
apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 more
Apache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)
CVE-2026-59245
8.1 High
-
apache apache-airflow-providers-git, apache software foundation airflow git provider +1 more
Apache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verification
CVE-2026-58065
8.1 High
-
apache airflow
Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()
CVE-2026-33264
Fix available
9.8 Critical
-
apache airflow
Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs
CVE-2026-49487
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key
CVE-2026-48828
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}
CVE-2026-49296
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target
CVE-2026-48891
Fix available
4.3 Medium
-
apache airflow
Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options
CVE-2026-48892
Fix available
6.5 Medium
-
apache apache-airflow-providers-google, apache software foundation airflow google provider +1 more
Apache Airflow Google provider: Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)
CVE-2026-49297
Fix available
8.1 High
-
apache apache-airflow-providers-ftp, apache software foundation airflow ftp provider +1 more
Apache Airflow FTP provider: FTP Provider does not protect FTPS data channel (missing PROT_P)
CVE-2026-49486
Fix available
7.5 High
-
apache apache-airflow-providers-sftp, apache software foundation airflow sftp provider +1 more
Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names
CVE-2026-50203
Fix available
9.1 Critical
-
apache apache-airflow-providers-samba, apache software foundation airflow samba provider +1 more
Apache Airflow Samba provider: Path traversal in GCSToSambaOperator via GCS object names
CVE-2026-49818
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler
CVE-2026-40861
Fix available
6.5 Medium
-
apache airflow
Apache Airflow: Open Redirect Bypass Vulnerability
CVE-2026-40961
Fix available
7.2 High
-
apache airflow
Apache Airflow: DAG authorization bypass on /ui/structure/structure_data
CVE-2026-40963
Fix available
3.1 Low
-
apache airflow
Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints
CVE-2026-41014
Fix available
4.3 Medium
-
apache airflow
Apache Airflow: No certificate validation on SMTP STARTTLS connections
CVE-2026-49267
Fix available
5.9 Medium
-
apache airflow
Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy
CVE-2026-41017
Fix available
5.9 Medium
- Show olderLoading…