Apache Airflow (Apache Software Foundation) - vulnerabilities (CVEs)

152 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2026-09-21. Vendor: Apache Software Foundation.

CVEs of Apache Airflow

• CVE-2026-86473 - CVSS 9.1 (critical), 2026-09-21: Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as…
• CVE-2026-75158 - CVSS 4.3 (medium), 2026-09-21: Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is…
• CVE-2026-82355 - CVSS 4.2 (medium), 2026-09-21: When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the…
• CVE-2026-75157 - CVSS 7.5 (high), 2026-09-18: Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with `READ` instead of `EDIT`. Any authenticated user who could…
• CVE-2026-59244 - CVSS 6.5 (medium), 2026-08-12: Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an…
• CVE-2026-58076 - CVSS 8.8 (high), 2026-08-12: Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and…
• CVE-2026-59242 - CVSS 5.4 (medium), 2026-08-12: Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value`…
• CVE-2026-54183 - CVSS 4.3 (medium), 2026-08-12: Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not…
• CVE-2026-67260 - CVSS 7.3 (high), 2026-08-12: Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweep deserializes the…
• CVE-2026-67587 - CVSS 8.8 (high), 2026-08-12: Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored…
• CVE-2026-65017 - CVSS 6.5 (medium), 2026-08-12: Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team…
• CVE-2026-68968 - CVSS 7.5 (high), 2026-08-12: Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse. The…
• CVE-2026-68969 - CVSS 6.5 (medium), 2026-08-12: Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH…
• CVE-2026-68970 - CVSS 6.5 (medium), 2026-08-12: Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task…
• CVE-2026-68971 - CVSS 6.5 (medium), 2026-08-12: Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished`…
• CVE-2026-68076 - CVSS 5.4 (medium), 2026-08-12: Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent…
• CVE-2026-33264 - CVSS 9.8 (critical), 2026-07-07: A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a…
• CVE-2026-49487 - CVSS 6.5 (medium), 2026-07-07: In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking. When a…
• CVE-2026-48828 - CVSS 6.5 (medium), 2026-07-07: The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which…
• CVE-2026-49296 - CVSS 6.5 (medium), 2026-07-07: Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET…
• CVE-2026-48891 - CVSS 4.3 (medium), 2026-07-07: A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still…
• CVE-2026-48892 - CVSS 6.5 (medium), 2026-07-07: The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and…
• CVE-2026-48726 - CVSS 6.5 (medium), 2026-06-01: A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for…
• CVE-2026-46764 - CVSS 4.3 (medium), 2026-06-01: The Event Log detail endpoint `GET /api/v2/eventLogs/{event_log_id}` in Apache Airflow fetched audit-log rows directly by numeric ID after only the generic…
• CVE-2026-49298 - CVSS 8.8 (high), 2026-06-01: A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API to be passed to the worker…
• CVE-2026-49267 - CVSS 5.9 (medium), 2026-06-01: Apache Airflow's EmailOperator and the underlying `airflow.utils.email` helpers established SMTP STARTTLS connections without verifying the remote certificate…
• CVE-2026-45360 - CVSS 7.3 (high), 2026-06-01: Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_reference`) imported and dispatched arbitrary class paths…
• CVE-2026-42360 - CVSS 6.5 (medium), 2026-06-01: A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` / `token` / `secret` / `api_key` keys…
• CVE-2026-45426 - CVSS 3.1 (low), 2026-06-01: Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag. Apache Airflow's…
• CVE-2026-40961 - CVSS 7.2 (high), 2026-06-01: A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the `is_safe_url` check, enabling redirection from…
• CVE-2026-41017 - CVSS 5.9 (medium), 2026-06-01: Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deployments running the Airflow API server behind an…
• CVE-2026-42358 - CVSS 6.5 (medium), 2026-06-01: A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like `password`, `token`, `secret`,…
• CVE-2026-41014 - CVSS 4.3 (medium), 2026-06-01: The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with…
• CVE-2026-42252 - CVSS 9.1 (critical), 2026-06-01: Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim…
• CVE-2026-40963 - CVSS 3.1 (low), 2026-06-01: The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission…
• CVE-2026-41084 - CVSS 7.5 (high), 2026-06-01: A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against…
• CVE-2026-42359 - CVSS 8.8 (high), 2026-06-01: A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to…
• CVE-2026-40861 - CVSS 6.5 (medium), 2026-06-01: A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path…
• CVE-2026-45192 - CVSS 6.5 (medium), 2026-06-01: A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read…
• CVE-2026-38743 - CVSS 4.3 (medium), 2026-04-24: The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow…
• CVE-2026-40690 - CVSS 4.3 (medium), 2026-04-24: The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset…
• CVE-2026-30912 - CVSS 7.5 (high), 2026-04-18: In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing…
• CVE-2026-30898 - CVSS 8.8 (high), 2026-04-18: An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to…
• CVE-2026-32690 - CVSS 3.7 (low), 2026-04-18: Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested…
• CVE-2026-32228 - CVSS 7.5 (high), 2026-04-18: UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the…
• CVE-2026-25917 - CVSS 7.2 (high), 2026-04-18: Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary…
• CVE-2026-31987 - CVSS 7.5 (high), 2026-04-16: JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Users are advised to upgrade to Airflow version that contains…
• CVE-2026-25219 - CVSS 6.5 (medium), 2026-04-15: The `access_key` and `connection_string` connection properties were not marked as sensitive names in secrets masker. This means that user with read permission…
• CVE-2025-54550 - CVSS 8.1 (high), 2026-04-15: The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited…
• CVE-2026-33858 - CVSS 8.8 (high), 2026-04-13: Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary…
• CVE-2025-66236 - CVSS 7.5 (high), 2026-04-13: Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security…
• CVE-2025-57735 - CVSS 9.1 (critical), 2026-04-09: When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted.…
• CVE-2026-34538 - CVSS 6.5 (medium), 2026-04-09: Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the…
• CVE-2026-26929 - CVSS 6.5 (medium), 2026-03-17: Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id…
• CVE-2026-30911 - CVSS 8.1 (high), 2026-03-17: Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any…
• CVE-2026-28779 - CVSS 7.5 (high), 2026-03-17: Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api]…
• CVE-2026-28563 - CVSS 4.3 (medium), 2026-03-17: Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This…
• CVE-2025-27555 - CVSS 6.5 (medium), 2026-02-24: Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they…
• CVE-2024-56373 - CVSS 8.4 (high), 2026-02-24: DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context,…
• CVE-2025-65995 - CVSS 6.5 (medium), 2026-02-21: When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained…
• CVE-2026-24098 - CVSS 6.5 (medium), 2026-02-09: Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors…
• CVE-2026-22922 - CVSS 6.5 (medium), 2026-02-09: Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access…
• CVE-2025-68675 - CVSS 7.5 (high), 2026-01-16: In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication…
• CVE-2025-68438 - CVSS 7.5 (high), 2026-01-16: In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in…
• CVE-2025-66388 - CVSS 6.5 (medium), 2025-12-15: A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly…
• CVE-2025-62503 - CVSS 4.6 (medium), 2025-10-30: User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.
• CVE-2025-62402 - CVSS 5.4 (medium), 2025-10-30: API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where…
• CVE-2025-54941 - CVSS 4.6 (medium), 2025-10-30: An example dag `example_dag_decorator` had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on…
• CVE-2025-54831 - CVSS 6.5 (medium), 2025-09-26: Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields…
• CVE-2024-45784 - CVSS 7.5 (high), 2024-11-15: Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in task logs. This vulnerability allows DAG…
• CVE-2024-50378 - CVSS 4.9 (medium), 2024-11-08: Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they…
• CVE-2024-45034 - CVSS 8.8 (high), 2024-09-07: Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG folder and get it executed by the…
• CVE-2024-45498 - CVSS 8.8 (high), 2024-09-07: Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows an authenticated attacker with only DAG…
• CVE-2024-41937 - CVSS 6.1 (medium), 2024-08-21: Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when…
• CVE-2024-39877 - CVSS 8.8 (high), 2024-07-17: Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a doc_md parameter in a way that could…
• CVE-2024-39863 - CVSS 8.1 (high), 2024-07-17: Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users…
• CVE-2024-25142 - CVSS 5.5 (medium), 2024-06-14: Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow.  Airflow did not return "Cache-Control" header for dynamic content,…
• CVE-2024-32077 - CVSS 5.4 (medium), 2024-05-14: Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.  Users are…
• CVE-2024-31869 - CVSS 5.3 (medium), 2024-04-18: Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via the "configuration" UI…
• CVE-2024-29735 - CVSS 5.3 (medium), 2024-03-26: Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3. Airflow's local file task…
• CVE-2024-28746 - CVSS 8.1 (high), 2024-03-14: Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as…
• CVE-2024-26280 - CVSS 4.7 (medium), 2024-03-01: Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including…
• CVE-2024-27906 - CVSS 5.9 (medium), 2024-02-29: Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have…
• CVE-2023-50944 - CVSS 6.5 (medium), 2024-01-24: Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have…
• CVE-2023-51702 - CVSS 6.5 (medium), 2024-01-24: Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this…
• CVE-2023-50943 - CVSS 7.5 (high), 2024-01-24: Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of…
• CVE-2023-48291 - CVSS 4.3 (medium), 2023-12-21: Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a…
• CVE-2023-50783 - CVSS 6.5 (medium), 2023-12-21: Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a…
• CVE-2023-49920 - CVSS 6.5 (medium), 2023-12-21: Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a…
• CVE-2023-47265 - CVSS 5.4 (medium), 2023-12-21: Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the…
• CVE-2023-42781 - CVSS 6.5 (medium), 2023-11-12: Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about…
• CVE-2023-47037 - CVSS 4.3 (medium), 2023-11-12: We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.  Apache Airflow, versions before 2.7.3, is affected by a…
• CVE-2023-46215 - CVSS 7.5 (high), 2023-10-28: Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text…
• CVE-2023-46288 - CVSS 4.3 (medium), 2023-10-23: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.4.0 to 2.7.0. Sensitive…
• CVE-2023-45348 - CVSS 4.3 (medium), 2023-10-14: Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve sensitive configuration information…
• CVE-2023-42792 - CVSS 6.5 (medium), 2023-10-14: Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a…
• CVE-2023-42780 - CVSS 6.5 (medium), 2023-10-14: Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if…
• CVE-2023-42663 - CVSS 6.5 (medium), 2023-10-14: Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about…
• CVE-2023-40712 - CVSS 6.5 (medium), 2023-09-12: Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft…
• CVE-2023-40611 - CVSS 4.3 (medium), 2023-09-12: Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail…