CVE-2020-11978

🗓️ 16 Jul 2020 00:00:00Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 1108 Views🌐 WEB

CVE-2020-11978: Remote code/command injection in Apache Airflo

Reporter	Title	Published	Views	Family All 33
0day.today	Apache Airflow 1.10.10 - (Example Dag) Remote Code Execution Exploit	2 Jun 202100:00	–	zdt
0day.today	Apache Airflow 1.10.10 Remote Code Execution Exploit	19 Sep 202300:00	–	zdt
Gitee	Exploit for OS Command Injection in Apache Airflow	6 Sep 202512:42	–	gitee
GithubExploit	Exploit for OS Command Injection in Apache Airflow	22 May 202115:58	–	githubexploit
ATTACKERKB	CVE-2020-11978	17 Jul 202000:00	–	attackerkb
Tenable Nessus	Apache Airflow < 1.10.11 Multiple Vulnerabilities	13 Jun 202200:00	–	nessus
BDU FSTEC	The vulnerability of the software responsible for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the failure to take measures to neutralize special elements used in the OS commands. This allows a malicious actor to execute arbitrary commands with superuser privileges.	10 Feb 202200:00	–	bdu_fstec
Circl	CVE-2020-11978	3 Jun 202100:39	–	circl
CISA KEV Catalog	Apache Airflow Command Injection	18 Jan 202200:00	–	cisa_kev
CISA	CISA Adds 13 Known Exploited Vulnerabilities to Catalog	18 Jan 202200:00	–	cisa

NVD

Vulners

Node

apache airflowRange<1.10.11

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Airflow",
    "versions": [
      {
        "version": "1.10.10 and below",
        "status": "affected"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/r7255cf0be3566f23a768e2a04b40fb09e52fcd1872695428ba9afe91%40%3Cusers.airflow.apache.org%3E
packetstormsecurity	www.packetstormsecurity.com/files/174764/Apache-Airflow-1.10.10-Remote-Code-Execution.html
packetstormsecurity	www.packetstormsecurity.com/files/162908/Apache-Airflow-1.10.10-Remote-Code-Execution.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
conf	request body	api/experimental/dags/example_trigger_target_dag/dag_runs	Trigger creation of a vulnerable DAG run to enable command injection via example_trigger_target_dag	CWE-78
env	path	api/experimental/dags/example_trigger_target_dag/tasks/bash_task	Check vulnerability by inspecting the bash_task which may contain dag_run in env, indicating vulnerability to CVE-2020-11978	CWE-78

17 Jun 2026 02:51Current

9.1High risk

Vulners AI Score9.1

CVSS 26.5

CVSS 3.18.8

EPSS0.99118

SSVC