CVE-2026-86473

The Apache Airflow Core API contains an insufficient session expiration vulnerability in the logout() endpoint located at airflow/api_fastapi/core_api/routes/public/auth.py. The endpoint only revokes session tokens presented as the _token cookie; if a client authenticates using an Authorization b...

CVE-2026-67587

The apache-airflow-task-sdk is vulnerable to a Deserialization of Untrusted Data (CWE-502) vulnerability. The issue arises because the Task SDK rebuilds a Callback object from serialized data by re-running its constructor, which imports the module specified by the stored callback path. Since Sync...

CVE-2026-68970

The apache-airflow-task-sdk is vulnerable to Cleartext Storage of Sensitive Information due to improper masking of Variable contents. When a JSON value is a list at the top level, the Task SDK fails to mask it, as masking was only implemented for strings and dictionaries. This allows any authenti...

CVE-2026-34538

Apache Airflow versions 3.0.0 through 3.1.8 contain an authorization bypass in the DagRun wait endpoint . The vulnerability allows users with only DAG Run read permissions , such as the Viewer role , to access XCom result values . This behavior contradicts the FAB RBAC model , which classifies XC...

CVE-2026-82355

Apache Airflow versions 3.3.0 and 3.3.1 are vulnerable to an Incorrect Authorization issue where the system prioritizes a session cookie over an explicit Authorization: Bearer token. This inversion of precedence allows an attacker who successfully plants a session cookie—via cookie tossing , cros...

CVE-2025-62503

Apache Airflow is susceptible to a privilege boundary bypass due to insufficient authorization checks in its bulk create API . An attacker with only CREATE privileges, but lacking UPDATE permissions, can exploit the overwrite action to modify existing Pools , Connections , and Variables . This im...

CVE-2025-66388

CVE-2025-66388 affects Apache Airflow where an authenticated UI user could view secret values in rendered templates because secrets were not properly redacted. This information disclosure vulnerability enables access to sensitive data without additional authorization. Public sources in connected ...

CVE-2026-75158

Apache Airflow is vulnerable to an authorization bypass in the /assets/events API . The root cause is a missing filter restricting results to Dags the caller is authorized to read. Consequently, any authenticated user with asset-read access can enumerate asset events—including source Dag ID, task...