Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability

🗓️ 07 Jul 2026 11:45:26Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 3 Views

Sensitive data may be logged in plain text by Airflow Celery provider when backends use redis, amqp, or rpc, upgrade to Celery provider 3.4.1 and Airflow 2.7.0.

Reporter	Title	Published	Views	Family All 22
bdu_fstec	The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the insufficient protection of registration data, allowing attackers to disclose sensitive information.	23 Jan 202400:00	–	bdu_fstec
cnnvd	Apache Airflow 日志信息泄露漏洞	28 Oct 202300:00	–	cnnvd
cnvd	Apache Airflow Log Information Disclosure Vulnerability	31 Oct 202300:00	–	cnvd
cve	CVE-2023-46215	28 Oct 202307:10	–	cve
cvelist	CVE-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend	28 Oct 202307:10	–	cvelist
euvd	EUVD-2023-2667	3 Oct 202520:07	–	euvd
github	Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability	28 Oct 202309:30	–	github
nvd	CVE-2023-46215	28 Oct 202308:15	–	nvd
osv	BIT-AIRFLOW-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend	6 Mar 202410:52	–	osv
osv	CVE-2023-46215 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend	28 Oct 202307:10	–	osv

Vulners

Node

pypi apache-airflowRange1.10.0–2.7.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46215
github	www.github.com/apache/airflow/pull/34954
github	www.github.com/apache/airflow
lists	www.lists.apache.org/thread/wm1jfmks7r6m7bj0mq4lmw3998svn46n
openwall	www.openwall.com/lists/oss-security/2023/10/28/1
pypi	www.pypi.org/project/apache-airflow
github	www.github.com/advisories/GHSA-666g-rfc5-c9jv

07 Jul 2026 17:23Current

7High risk

Vulners AI Score7

CVSS 3.17.5

EPSS0.01203

SSVC