Apache Airflow vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
167 matching records
- High7.2Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.Check if you run itEPSS 0.82%Apr 18, 2026
- High7.5JWT Tokens used by tasks were exposed in logs.Check if you run itEPSS 0.74%Apr 16, 2026
- Medium6.5The and connection properties were not marked as sensitive names in secrets masker.Check if you run itEPSS 0.55%Apr 15, 2026
- High8.1The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow U…Check if you run itEPSS 0.58%Apr 15, 2026
- High8.8Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.Check if you run itEPSS 0.59%Apr 13, 2026
- High7.5Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details a…Check if you run itEPSS 0.44%Apr 13, 2026
- Critical9.1When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted.Check if you run itEPSS 0.67%Apr 9, 2026
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer ro…Check if you run itEPSS 0.69%Apr 9, 2026
- Medium4.8Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks.Check if you run itEPSS 0.39%Mar 30, 2026
- High8.1Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated…Check if you run itEPSS 0.56%Mar 17, 2026
- High7.5Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.Check if you run itEPSS 0.70%Mar 17, 2026
- Medium4.3Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs.Check if you run itEPSS 0.46%Mar 17, 2026
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "…Check if you run itEPSS 0.42%Mar 17, 2026
- High8.8A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissi…Check if you run itEPSS 0.71%Mar 9, 2026
- Medium6.5Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see.Check if you run itEPSS 0.42%Feb 24, 2026
- High8.4DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which th…Check if you run itEPSS 1.23%Feb 24, 2026
- Medium6.5When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators.Check if you run itEPSS 0.89%Feb 21, 2026
- Medium6.5Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view t…Check if you run itEPSS 0.44%Feb 9, 2026
- Medium6.5Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other DaCheck if you run itEPSS 0.83%Feb 9, 2026
- High7.5In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartex…Check if you run itEPSS 0.62%Jan 16, 2026
- High7.5In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information.Check if you run itEPSS 1.88%Jan 16, 2026
- Critical9.8Edge3 Worker RPC RCE on Airflow 2.Check if you run itEPSS 1.17%Dec 17, 2025
- Medium6.5A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secretCheck if you run itEPSS 0.48%Dec 15, 2025
- Medium4.6An example dag had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker.Check if you run itEPSS 0.49%Oct 30, 2025
- Medium5.4API users via could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.Check if you run itEPSS 0.52%Oct 30, 2025