poc-cve-2025-69219

CVE-2025-69219 apache airflow unsafe deserialization to RCE 1. copy poc.py to your Airflow dags directory. 2. trigger the poc workflow from the UI. 3. check task logs for execution output...

Cross-site Request Forgery (CSRF)

Overview apache-airflow-providers-amazon is a Provider for Apache Airflow. Implements apache-airflow-providers-amazon package Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF via the AWS auth manager SAML login flow, where login discards the AuthnRequest id...

EUVD-2026-102522

The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: afte...

CVE-2026-96806 Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token

The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: afte...

CVE-2026-96806 Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token

The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: afte...

PT-2026-115313

Name of the Vulnerable Software and Affected Versions apache-airflow-providers-keycloak versions prior to 0.11.1 Description The Keycloak auth manager fails to terminate the session during logout. While the logout route revokes the provided token, the KeycloakJWTMiddleware issues a new, unrevoked...

apache-airflow-providers-snowflake (>=2.4.0rc1, <=2.5.1), rcd-dev-kit (>=0.0.11, <=1.1.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.1)

snowflake-connector-python PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - apache-airflow-providers-snowflake =2.4.0rc1, =0.0.11, =1.1.0 Source cves: CVE-2026-86597 Source advisory:...

Insertion of Sensitive Information into Log File

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the execute method in azureblobtoteradata.py and s3toteradata.py, when no...

airflow-oracle-snowflake-plugin (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-81930 via apache-airflow-providers-snowflake (3.3.0)

apache-airflow-providers-snowflake PYPI version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-snowflake and may be impacted: - airflow-oracle-snowflake-plugin =0.1.0, =0.1.2 Source cves: CVE-2026-81930 Source advisory:...

Insufficiently Protected Credentials

Overview apache-airflow-providers-snowflake is a Provider package apache-airflow-providers-snowflake for Apache Airflow Affected versions of this package are vulnerable to Insufficiently Protected Credentials via unsanitized interpolation of the account and region connection fields into Snowflake...

Improper Neutralization of Special Elements in Data Query Logic

Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via GoogleDriveHook in drive.py, where folder names, fi...

SQL Injection

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to SQL Injection in the Teradata compute-cluster example DAG, where user-settable Params are not properly constrained, allowing an...

airflow-parse-bench (>=0.0.1, <=1.0.1), airflow-toolkit (0.13.3) +2 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.26.0)

apache-airflow-providers-google PYPI version 10.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-parse-bench =0.0.1, =0.11.1, =0.1.0, =0.1.1 Source cves: CVE-2026-81914 Source advisory:...

airflow-add-ons (>=0.2.9b1, <=0.2.9b2) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (7.0.0)

apache-airflow-providers-google PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-add-ons =0.2.9b1, =0.2.9b2 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-418...

dagtool (>=0.0.8, <=0.0.11) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (15.1.0)

apache-airflow-providers-google PYPI version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.8, =0.0.11 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

dataflow-airflow (2.10.10) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (19.0.0)

apache-airflow-providers-google PYPI version 19.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dataflow-airflow 2.10.10 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

gps-building-blocks (1.2.2) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (1.0.0)

apache-airflow-providers-google PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - gps-building-blocks 1.2.2 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...

airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (6.8.0)

apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-81914 Source advisory:...

airflow-tools (>=0.9.0, <=0.11.0), risk-custom-secrets-provider (>=1.0.9, <=1.1.3) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.23.0)

apache-airflow-providers-google PYPI version 10.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-tools =0.9.0, =1.0.9, =1.1.3 Source cves: CVE-2026-81914 Source advisory:...

dagtool (>=0.0.2, <=0.0.7) potentially affected by CVE-2026-81914 via apache-airflow-providers-google (10.21.1)

apache-airflow-providers-google PYPI version 10.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - dagtool =0.0.2, =0.0.7 Source cves: CVE-2026-81914 Source advisory: OSV:PYSEC-2026-4187...