CVE-2026-101031

Apache Airflow is vulnerable in the example_dag_decorator example DAG when load_examples is enabled. The vulnerability stems from the use of Python's ipaddress module to validate an IP address fetched over HTTP, which is then placed into a shell command. Because ipaddress accepts IPv6 zone identi...