CVE-2025-67895

The Apache Airflow Providers Edge3 component is vulnerable to Remote Code Execution (RCE) in the webserver context when installed and configured on Airflow 2 (versions before 2.0.0). The root cause is the implicit exposure of a non-public, development-only Worker RPC API used for testing, which a...