CVE-2026-40861

In Apache Airflow , a Dag author can exploit a path resolution flaw in the FileTaskHandler to leak or overwrite arbitrary files. This occurs because the handler resolves log paths outside the configured base_log_folder. Vulnerable paths can be accessed via two methods: (a) creating a symlink in a...