Apache Airflow security vulnerabilities
Open-source infrastructure. Public CVE monitoring for Apache Airflow. Vendor security advisories are linked on this page.
Built for Operators of this product.
167 public records · 0 security-fix timeline events. 0 published in the last 7 days. 160 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 1
- High 4
- Medium 11
- Low 0
2026-08-0616 issues2026-11-03
Known exploited
View all known exploited- High8.8Apache Airflow Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 77.88%Feb 25, 2022
- Critical9.8Apache Airflow's Experimental API Authentication BypassPatch nowKEVEPSS 99.78%Nov 10, 2020
- High8.8Apache Airflow Command InjectionPatch nowKEVEPSS 99.19%Jul 16, 2020
Recently published
Browse catalog- MediumApache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement tokenCheck if you run itEPSS 0.37%Oct 15, 2026
- Medium4.3Apache Airflow's API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read.Check if you run itEPSS 0.64%Sep 21, 2026
- Critical9.1Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie.Check if you run itEPSS 0.75%Sep 21, 2026
- High7.5Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the path segment failed to parse.Check if you run itEPSS 0.42%Aug 12, 2026
- Medium5.4Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope.Check if you run itEPSS 0.34%Aug 12, 2026
- Medium6.5In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking.Check if you run itEPSS 0.66%Jul 7, 2026
- Medium6.5Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file.Check if you run itEPSS 0.60%Jul 7, 2026
- Critical9.8A bug in allowed unrestricted of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG toCheck if you run itEPSS 1.65%Jul 7, 2026
- Medium6.5A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g.Check if you run itEPSS 0.35%Jun 1, 2026
- Medium4.3The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization.Check if you run itEPSS 0.37%Jun 1, 2026