CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

CVE-2025-30473 Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

CVE-2025-30473

CVE-2025-30473 affects the Apache Airflow Common SQL Provider (before 1.24.1). The issue is an SQL Injection in the use of the partition_clause parameter of SQLTableCheckOperator, enabling an authenticated UI user to inject arbitrary SQL commands when triggering DAGs that expose partition_clause....