Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/05 5:40 a.m.19 views

BIT-AIRFLOW-2026-49298 Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments

A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API to be passed to the worker container as command-line arguments visible in the pod spec. An authenticated UI/API user with Kubernetes read-only access to the cluster e.g...

8.8CVSS5.5AI score0.00489EPSS
SaveExploits0References3
Rows per page
Query Builder