Skip to contentApache Airflow vulnerabilities
- apache airflowApache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutationCVE-2026-41084Fix available7.5 High
- apache airflowApache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user patternCVE-2026-42252Fix available9.1 Critical
- apache airflowApache Airflow: Rendered template truncation bypasses nested sensitive-key maskingCVE-2026-42360Fix available6.5 Medium
- apache airflowApache Airflow: Variable masker depth-limit bypass returns cleartext nested secretsCVE-2026-42358Fix available6.5 Medium
- apache airflowApache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validatorCVE-2026-42359Fix available8.8 High
- apache airflowApache Airflow: Arbitrary import in custom deadline-reference deserializationCVE-2026-45360Fix available7.3 High
- apache airflowApache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log accessCVE-2026-45426Fix available3.1 Low
- apache airflowApache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filterCVE-2026-46764Fix available4.3 Medium
- apache airflowApache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout pathCVE-2026-48726Fix available6.5 Medium
- apache airflowApache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsCVE-2026-49298Fix available8.8 High
- apache airflowApache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API ResponseCVE-2026-45192Fix available6.5 Medium
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/tokenCVE-2026-46745Fix available5.3 Medium
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 moreApache Airflow Google provider: SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)CVE-2026-45361Fix available8.1 High
- apache software foundation airflow cncf kubernetes provider, apache apache-airflow-providers-cncf-kubernetes +1 moreApache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line ArgumentsCVE-2026-27173Fix available8.7 High
- apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 moreApache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backendsCVE-2026-42526Fix available5.3 Medium
- apache apache-airflow-providers-elasticsearch, apache software foundation airflow providers elasticsearch +1 moreApache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URLCVE-2026-41018Fix available6.5 Medium
- apache apache-airflow-providers-opensearch, apache software foundation airflow providers opensearch +1 moreApache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URLCVE-2026-43826Fix available6.5 Medium
- apache airflow, apache software foundation airflow providers smtp +1 moreApache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP providerCVE-2026-41016Fix available5.9 Medium
- apache airflowApache Airflow: Dags endpoint might provide access to otherwise inaccessible entitiesCVE-2026-38743Fix available4.3 Medium
- apache airflowApache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized usersCVE-2026-40690Fix available4.3 Medium
- apache apache-airflow-providers-keycloak, apache software foundation airflow providers keycloak +1 moreApache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth ManagerCVE-2026-40948Fix available5.4 Medium
- apache airflowApache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1CVE-2026-32690Fix available3.7 Low
- apache airflowApache Airflow: Bad example of BashOperator shell injection via dag_run.confCVE-2026-30898Fix available8.8 High
- apache airflowApache Airflow: Exposing stack trace in case of constraint errorCVE-2026-30912Fix available7.5 High
- apache airflowApache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)CVE-2026-25917Fix available7.2 High
- apache airflowApache Airflow: Users with asset materialization permisssions could trigger Dags they had no access toCVE-2026-32228Fix available7.5 High
- apache airflowApache Airflow: JWT token appearing in logsCVE-2026-31987Fix available7.5 High
- apache airflowApache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view accessCVE-2026-25219Fix available6.5 Medium
- apache airflowApache Airflow: RCE by race condition in example_xcom dagCVE-2025-54550Fix available8.1 High
- apache airflowApache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom APICVE-2026-33858Fix available8.8 High
- apache airflowApache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UICVE-2025-66236Fix available7.5 High
- apache airflowApache Airflow: Airflow Logout Not Invalidating JWTCVE-2025-57735Fix available9.1 Critical
- apache airflowApache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)CVE-2026-34538Fix available6.5 Medium
- apache software foundation airflow provider for databricks, apache airflow providers databricks +1 moreApache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token ExchangeCVE-2026-32794Public exploitFix available4.8 Medium
- apache airflowApache Airflow: DAG authorization bypassCVE-2026-28563Fix available4.3 Medium
- apache airflowApache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks MetadataCVE-2026-26929Fix available6.5 Medium
- apache airflowApache Airflow: Execution API HITL Endpoints Missing Per-Task AuthorizationCVE-2026-30911Fix available8.1 High
- apache airflowApache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applicationsCVE-2026-28779Fix available7.5 High
- apache apache-airflow-providers-amazon, apache software foundation airflow providers amazon +1 moreApache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication BypassCVE-2026-25604Public exploitFix available5.4 Medium
- apache airflow providers httpApache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperatorCVE-2025-69219Public exploitFix available8.8 High
- apache airflowApache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cliCVE-2025-27555Fix available6.5 Medium
- apache airflowApache Airflow: SSTI to Code Execution in Airflow through Shared DB InformationCVE-2024-56373Fix available8.4 High
- apache airflowApache Airflow: Disclosure of secrets to UI via kwargsCVE-2025-65995Fix available6.5 Medium
- apache airflowApache Airflow: Airflow externalLogUrl Permission BypassCVE-2026-22922Fix available6.5 Medium
- apache airflowApache Airflow: Assigning single DAG permission leaked all DAGs Import ErrorsCVE-2026-24098Fix available6.5 Medium
- apache airflowApache Airflow: proxy credentials for various providers might leak in task logsCVE-2025-68675Fix available7.5 High
- apache airflowApache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncatedCVE-2025-68438Fix available7.5 High
- apache software foundation airflow providers edge3, apache apache-airflow-providers-edge3 +1 moreApache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2CVE-2025-67895Fix available9.8 Critical
- apache airflowApache Airflow: Secrets in rendered templates not redacted properly and exposed in the UICVE-2025-66388Fix available6.5 Medium
- apache airflowApache Airflow: Command injection in "example_dag_decorator"CVE-2025-54941Fix available4.6 Medium
- Show moreLoading…