7 matches found
Apache Airflow: RCE by race condition in example_xcom dag
The example examplexcomthat was included in airflow documentation implemented unsafe pattern of reading valuefrom xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitraryexecution of code on the worker. Since the UI users are already highly...
GHSA-Q2HG-643C-GW8H Apache Airflow: RCE by race condition in example_xcom dag
The example examplexcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. Since the UI users are already highly...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection in the example code in examplexcom. Unsafe pattern of reading value from xcom could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. Note: Vendor...
CVE-2025-54550 Apache Airflow: RCE by race condition in example_xcom dag
The example examplexcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. Since the UI users are already highly...
CVE-2025-54550
The example_xcom DAG included in Apache Airflow documentation implements an unsafe pattern for reading values from XCom . This flaw could allow a UI user with permissions to modify XComs to achieve arbitrary code execution on the worker. While this does not affect official Airflow releases—as exa...
CVE-2025-54550
The example examplexcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. Since the UI users are already highly...
