Apache Airflow vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
167 matching records
- Critical9.8A bug in allowed unrestricted of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG toCheck if you run itEPSS 1.65%Jul 7, 2026
- High8.8A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API to be passed to the worker container as co…Check if you run itEPSS 0.49%Jun 1, 2026
- Medium5.9Apache Airflow's EmailOperator and the underlying helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used witho…Check if you run itEPSS 0.18%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for and did not…Check if you run itEPSS 0.38%Jun 1, 2026
- Medium4.3The Event Log detail endpoint in Apache Airflow fetched audit-log rows directly by numeric ID after only the generic Audit Log permission check, while the collection e…Check if you run itEPSS 0.37%Jun 1, 2026
- Low3.1Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag.Check if you run itEPSS 0.36%Jun 1, 2026
- High7.3Apache Airflow's scheduler-side deadline-reference decoder ( ) imported and dispatched arbitrary class paths drawn from DAG-author-controlled serialized state without…Check if you run itEPSS 0.68%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g.Check if you run itEPSS 0.35%Jun 1, 2026
- High8.8A bug in Apache Airflow's XCom PATCH endpoint allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (e.g.Check if you run itEPSS 0.57%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like , , , ) to be bypassed when the JSON value'…Check if you run itEPSS 0.34%Jun 1, 2026
- High7.5A bug in Apache Airflow's bulk Task Instances API ( ) evaluated authorization against the resolved from the URL path while operating on the / extracted from request-bo…Check if you run itEPSS 0.48%Jun 1, 2026
- Medium5.9Apache Airflow's set the JWT auth cookie without the flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g.Check if you run itEPSS 0.35%Jun 1, 2026
- Medium4.3The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization.Check if you run itEPSS 0.37%Jun 1, 2026
- Low3.1The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission on those linked Dags.Check if you run itEPSS 0.48%Jun 1, 2026
- High7.2sync 2026-11-02T23:08:20ZCheck if you run itEPSS 0.65%Jun 1, 2026
- Medium6.5A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g.Check if you run itEPSS 0.69%Jun 1, 2026
- Medium6.5A bug in the GET REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's…Check if you run itEPSS 0.43%Jun 1, 2026
- Critical9.1Apache Airflow's official documentation at ("Passing Parameters when triggering Dags") showed a verbatim example without any quoting / sanitization warning.Check if you run itEPSS 0.38%Jun 1, 2026
- Medium5.9Apache Airflow's SMTP provider called Python's without an SSL context, so no certificate validation was performed on the TLS upgrade.Check if you run itEPSS 0.27%Apr 30, 2026
- Medium4.3The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for an…Check if you run itEPSS 0.35%Apr 24, 2026
- Medium4.3The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with…Check if you run itEPSS 0.35%Apr 24, 2026
- Low3.7Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked.Check if you run itEPSS 0.42%Apr 18, 2026
- High7.5UI / API User with asset materialize permission could trigger dags they had no access to.Check if you run itEPSS 0.43%Apr 18, 2026
- High7.5In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false.Check if you run itEPSS 0.45%Apr 18, 2026
- High8.8An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate p…Check if you run itEPSS 0.77%Apr 18, 2026