Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the GET /api/v2/assets/events endpoint in assets.py, which applies only a global "Assets" resource check via requiresaccessassetmethod="GET" and no per-DAG row filter. A caller with read...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via the logout endpoint in airflow/apifastapi/coreapi/routes/public/auth.py, which previously read only the token cookie when revoking credentials. A client authenticating with an Authorization: Bearer...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in JWTRefreshMiddleware's caller resolution, which resolves the caller from the session cookie and ignores an accompanying Authorization: Bearer token, inverting the intended precedence of bearer over cookie. An...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via the deleteassetqueuedevents, deletedagassetqueuedevents, and related queued-events DELETE routes in airflow/apifastapi/coreapi/routes/public/assets.py. An attacker can delete a DAG’s queued asset events by...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =3.3.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076 Source advisory: GHSA-8PRW-8M6X-8W6F...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key in the connections/test API endpoint due to improper enforcement of team-scoped access controls. An attacker can access another team's environment connection and authenticate outward usin...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the handling of bulk requests to the PATCH /api/v2/variables and PATCH /api/v2/connections endpoints. An attacker can obtain sensitive secret values in cleartext by accessing the audit...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +46 more potentially affected by CVE-2026-58076 via apache-airflow-core (>=3.0.0rc2, <=3.3.1rc2)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =3.3.1rc2 - apache-airflow-providers-box 2.0.6 and more Source cves: CVE-2026-58076 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-18748601...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-calendar (>=0.5.0, <=0.9.1) +46 more potentially affected by CVE-2026-59242 via apache-airflow-core (>=3.0.0rc2, <=3.3.1rc2)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =0.5.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =3.3.1rc2 - apache-airflow-providers-box 2.0.6 and more Source cves: CVE-2026-59242 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-18748418...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the awaitinginput. An attacker can execute arbitrary code or terminate the scheduler process by supplying crafted data to the nextkwargs parameter during task execution. Note: This is only exploitabl...

airflow-calendar (>=0.5.0, <=0.9.1), airflow-provider-great-expectations (1.0.0) +2 more potentially affected by CVE-2026-58076 via apache-airflow (>=3.3.0, <=3.3.1rc2)

apache-airflow PYPI version =3.3.0, =0.5.0, =3.3.0, =1.3.0, =1.3.1rc2 Source cves: CVE-2026-58076 Source advisory: OSV:PYSEC-2026-3991...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +36 more potentially affected by CVE-2026-32228 via apache-airflow-core (>=3.0.0, <=3.2.0rc2)

apache-airflow-core PYPI version =3.0.0, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.25.0, =1.28.0 and more Source cves: CVE-2026-32228 Source advisory: OSV:PYSEC-2026-2360...

PT-2026-59051

Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate vulnerability. The default SSL context with SSL library did not check a server's X.509 certificate. Instead, the code accepte...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration via the dep.source and dep.target fields in the scheduling graph endpoint. An attacker can obtain identifiers of resources they are not authorized to access by inspecting dependency information exposed...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +44 more potentially affected by CVE-2026-28563 +1 more via apache-airflow-core (>=3.0.0rc2, <=3.2.2)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.7.3 and more Source cves: CVE-2026-28563, CVE-2026-48891 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-17878939...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +39 more potentially affected by CVE-2026-41014 via apache-airflow-core (>=3.0.0rc2, <=3.2.2rc3)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.6.2 and more Source cves: CVE-2026-41014 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-17137573...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +39 more potentially affected by CVE-2026-42359 via apache-airflow-core (>=3.0.0rc2, <=3.2.2rc3)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.6.2 and more Source cves: CVE-2026-42359 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-17137551...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the GET /api/v2/eventLogs/eventlogid endpoint. An attacker can access audit-log entries for unauthorized DAGs by enumerating or guessing numeric event log IDs. This is only exploitabl...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +39 more potentially affected by CVE-2026-49267 via apache-airflow-core (>=3.0.0rc2, <=3.2.1)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.6.2 and more Source cves: CVE-2026-49267 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-17934386...

airflow-balancer (>=0.7.0, <=0.7.6), airflow-clickhouse-plug (1.6.2) +39 more potentially affected by CVE-2026-46764 via apache-airflow-core (>=3.0.0rc2, <=3.2.1)

apache-airflow-core PYPI version =3.0.0rc2, =0.7.0, =1.5.0, =0.6.1, =1.10.7, =0.6.0a1, =0.1.0, =1.4.3, =0.3.0, =1.2.10, =3.0.0rc3, =1.1.3rc1, =1.6.0rc1, =1.5.3rc1, =1.6.2 and more Source cves: CVE-2026-46764 Source advisory: SNYK:PYTHON-APACHEAIRFLOWCORE-17933320...