EUVD-2026-12558

🗓️ 17 Mar 2026 12:30:20Reported by EUVDType

Airflow versions 3.1.0–3.1.7 expose the session token cookie path, risking cross-domain token theft; upgrade to 3.1.8+.

Reporter	Title	Published	Views	Family All 24
ATTACKERKB	CVE-2026-28779	17 Mar 202610:15	–	attackerkb
Circl	CVE-2026-28779	17 Mar 202622:16	–	circl
CNNVD	Apache Airflow 安全漏洞	17 Mar 202600:00	–	cnnvd
CNVD	Apache Airflow Information Disclosure Vulnerability (CNVD-2026-15156)	19 Mar 202600:00	–	cnvd
CVE	CVE-2026-28779	17 Mar 202610:15	–	cve
Cvelist	CVE-2026-28779 Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications	17 Mar 202610:15	–	cvelist
Github Security Blog	Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications	17 Mar 202612:30	–	github
NVD	CVE-2026-28779	17 Mar 202611:16	–	nvd
OSV	BIT-AIRFLOW-2026-28779 Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications	18 Mar 202608:39	–	osv
OSV	GHSA-4FHM-P86V-HWPX Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications	17 Mar 202612:30	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "a4f96b62-1657-3ce1-a509-609dbac222aa",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "9bef1b56-42c9-3145-bf68-0483dd146871",
        "product": {
          "name": "Apache Airflow"
        },
        "product_version": "3.0.0 <3.1.8"
      }
    ]
  }
]

Source	Link
github	www.github.com/apache/airflow/pull/62771
lists	www.lists.apache.org/thread/r4n5znb8mcq14wo9v8ndml36nxlksdqb
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-28779

17 Mar 2026 12:30Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00031

SSVC