Lucene search
+L

2 matches found

OSV
OSV
added 2026/03/17 10:53 a.m.11 views

CVE-2026-30911 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop HITL endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to...

8.1CVSS7.2AI score
SaveExploits0References6
Rows per page
Query Builder