Apache Airflow Security Bypass Vulnerability (CNVD-2024-0101523)

Apache Airflow is the United States Apache (Apache) Foundation’s set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security bypass vulnerability exists in Apache Airflow versions prior to 2.8.0, which can be exploited by an authenticated attacker to update variables without variable editing privileges, resulting in unauthorized data modifications.