CVE-2025-62402

API users via /api/v2/dagReports could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available...

CVE-2025-62402 Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API

API users via /api/v2/dagReports could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available...

CVE-2025-62402

creationtimestamp| type| source ---|---|--- 2025-10-29 19:33:03+00:00| seen| https://seclists.org/oss-sec/2025/q4/100 2025-10-29 21:09:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m4eeape4oa2s 2025-10-30 12:00:40+00:00| seen|...