CVE-2025-27555

Apache Airflow versions prior to 2.11.1 are vulnerable to a log information disclosure flaw. When sensitive connection parameters are configured via the airflow CLI , the associated values are recorded in the audit logs and stored unencrypted in the Airflow database. This allows authenticated use...