Lucene search
+L

8 matches found

OSV
OSV
added 2026/06/05 5:40 a.m.13 views

BIT-AIRFLOW-2026-40861 Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler

A Dag author could either a create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process read-path attack — e.g. /etc/passwd or airflow.cfg or b supply a taskid containing .. sequences accepted by the Task SDK's KEYREGEX write-path attack, and...

6.5CVSS5.6AI score0.00691EPSS
SaveExploits0References4
Rows per page
Query Builder