CVE-2026-49267

Apache Airflow 's EmailOperator and airflow.utils.email helpers are vulnerable to a network MITM attack because they establish SMTP STARTTLS connections without verifying the remote certificate. This occurs when smtp_starttls=True is used without smtp_ssl. An attacker positioned between the worke...

CVE-2026-49267

creationtimestamp| type| source ---|---|--- 2026-05-31 12:43:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mn5lqqqiav2d...