CVE-2024-45784

Apache Airflow versions prior to 2.10.3 are vulnerable to a flaw where sensitive configuration variables are not masked in task logs by default. This allows DAG authors to unintentionally or intentionally expose critical data, which unauthorized users could then access to compromise the security ...

CVE-2024-56373

In Apache Airflow 2 , a DAG Author with existing permissions can manipulate the database to execute arbitrary code in the web-server context . This vulnerability allows for remote code execution (server-side) when a user views historical task information . The root cause involves the LogTemplate ...

CVE-2026-45192

A bug in the Apache Airflow GET /api/v2/connections/{connection_id} REST API endpoint allows authenticated users with Connection-read permissions to access secrets stored within a Connection's extra JSON blob. The vulnerability occurs because certain field names, such as those used by the officia...

CVE-2023-48291

Apache Airflow prior to 2.8.0 is affected by an access-control vulnerability where an authenticated user with limited DAG access can craft a request to obtain write access to DAG resources for other DAGs, enabling them to clear DAGs they shouldn’t. This CVE (CVE-2023-48291) is described as a miss...

CVE-2018-20245

CVE-2018-20245 affects Apache Airflow versions prior to 1.10.1, where the LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) had improper exception handling that disabled server certificate checking. This misconfiguration enables potential Man‑in‑the‑Middle risks against LDAP connections...

CVE-2026-49298

A bug in Apache Airflow 's KubernetesExecutor causes JWT tokens used by worker pods to authenticate against the Execution API to be passed as command-line arguments. These tokens are visible in the pod spec, allowing an authenticated UI/API user with Kubernetes read-only access (e.g., pods/get) t...

CVE-2023-22888

Apache Airflow is affected in versions before 2.6.3 by a vulnerability that allows service disruption via manipulation of the run_id parameter. Exploitation requires an authenticated user, and the impact is described as a high availability disruption with no confidentiality/integrity impact repor...

CVE-2026-42360

A bug in Apache Airflow 's rendered-template field handling allows for the bypass of nested sensitive-key masking (e.g., password, token, secret, api_key) within JSON structures. When a rendered field exceeds the [core] max_templated_field_length, Airflow stringifies the structure before redactio...

CVE-2019-12398

Apache Airflow prior to 1.10.5 with the classic UI is affected. A malicious admin can modify object state in the Airflow metadata database to execute arbitrary JavaScript on certain page views (XSS). The RBAC UI is unaffected. Exploitation details and concrete fixes are not provided in the suppli...

CVE-2026-46764

The CVE-2026-46764 affects Apache Airflow’s Event Log APIs: the detail endpoint GET /api/v2/eventLogs/{event_log_id} returns audit-log rows by numeric ID after only a generic Audit Log permission check, while GET /api/v2/eventLogs applies per-Dag scoping. An authenticated user with audit-log read...

CVE-2022-46651

Apache Airflow (versions before 2.6.3) is affected by an information-disclosure vulnerability in the Connection edit view. An unauthorized actor with access to Connection resources could potentially view sensitive data when updating a connection. Remediation: upgrade to Airflow 2.6.3 or later, wh...

CVE-2023-50783

Apache Airflow prior to 2.8.0 is affected by an improper access control vulnerability that allows an authenticated user without the variable edit permission to update a variable, compromising variable management integrity and potentially enabling unauthorized data modifications. The issue is docu...

CVE-2026-40861

A Dag author can exploit a path traversal vulnerability in the FileTaskHandler of Apache Airflow to leak or overwrite arbitrary files. This occurs because the handler resolves log paths outside the configured base_log_folder. Attackers can either create a symlink in a task's log directory pointin...

CVE-2026-42358

Summary (CVE-2026-42358): In Apache Airflow, the Variable response masker can bypass nested-key redaction when JSON values are deeply nested. Keys ending with secret-like suffixes (password, token, secret, api_key) could have their plaintext values exposed if nesting depth exceeds the masker's re...

CVE-2018-20244

CVE-2018-20244 affects Apache Airflow before 1.10.2. A malicious admin can edit the state of objects in the Airflow metadata database to inject arbitrary JavaScript on certain page views, causing a Stored XSS vulnerability. The impact is that a victim’s browser could execute injected scripts when...

CVE-2026-48726

A bug in the Apache Airflow auth manager's logout handling prevents the revoke_token() call from being reached for FabAuthManager and KeycloakAuthManager (it does not affect SimpleAuthManager). Consequently, previously-issued JWT tokens remain valid until their natural expiry even after a user lo...

CVE-2026-68968

Apache Airflow's Backfill API is vulnerable to an authorization bypass due to an interpretation conflict in how the backfill_id path segment is parsed. The authorization dependency uses int(), while the route handler uses pydantic's NonNegativeInt; this allows values like 1.0 (which coerces to 1 ...

CVE-2017-12614

CVE-2017-12614 describes a reflected cross-site scripting vulnerability on Apache Airflow 404 pages. The root cause is an XSS in certain 404 endpoints, with Chrome detecting it as reflected but other browsers remaining vulnerable. Affected product: Apache Airflow (version unspecified in the initi...

CVE-2025-65995

When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as secrets), they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The iss...

CVE-2026-38743

The Apache Airflow authenticated /ui/dags endpoint fails to enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records. A logged-in user with read access to at least one DAG can retrieve HITL prompts (including request parameters) and full TaskInstance details fo...

CVE-2026-30912

Apache Airflow versions prior to 3.2.0 are vulnerable to an issue where SQL errors cause the API to expose exception/stack traces . This exposure occurs even when the "api/expose_stack_traces" configuration is set to false . The leak of these traces can provide an attacker with additional sensiti...

CVE-2026-48828

The Bulk Variables API in Apache Airflow fails to pass the variable's key to the redactor for JSON-decodable values. This causes the should_hide_value_for_key check to fail for keys ending in suffixes like *_password, *_token, or *_secret. Consequently, an authenticated user with bulk Variable re...

CVE-2026-48892

Apache Airflow 's Config API exposed per-key secrets-backend environment overrides (e.g., AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID) as synthetic config options whose names were absent from sensitive_config_values, causing the secrets masker to fail to redact them. An authenticated UI/API user w...

CVE-2026-68076

Apache Airflow's environment-variable secrets backend contains an authorization bypass where a team-scoped Connection or Variable can be resolved from the wrong team's scope. The root cause is a guard bypass occurring when a team name contains an underscore , causing the lookup to fall through to...

CVE-2026-68969

Apache Airflow's bulk endpoints (PATCH /api/v2/variables and PATCH /api/v2/connections) wrote Variable values and Connection extra contents to the audit log in cleartext . The root cause is that audit-log masking recognized only top-level request fields, while bulk requests nest entities two leve...

CVE-2026-25219

The access_key and connection_string connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azur...

CVE-2026-40690

In Apache Airflow , the asset dependency graph fails to restrict nodes based on the viewer's DAG read permissions . A user with read access to at least one DAG can browse the asset graph for any other asset in the deployment, potentially learning the existence and names of DAGs and assets outside...

CVE-2025-54550

The example_xcom DAG included in Apache Airflow documentation implements an unsafe pattern for reading values from XCom . This flaw could allow a UI user with permissions to modify XComs to achieve arbitrary code execution on the worker. While this does not affect official Airflow releases—as exa...

CVE-2026-49296

Apache Airflow before version 3.3.0 is vulnerable to an authorization bypass in the DAG source retrieval endpoint. The GET /api/v2/dagSources/{dag_id} API (and its equivalent UI view) returned the entire source file without redacting DAGs the caller was not authorized to read, effectively bypassi...

CVE-2026-48891

A bug in Apache Airflow 's /ui/dependencies scheduling graph endpoint allows an authenticated UI user with read permissions on some Dags to enumerate identifiers of other Dags they are not authorized to read. The vulnerability occurs because the readable-Dag filter is applied to the top-level ser...

CVE-2026-68971

Apache Airflow versions prior to 3.3.1 contain a cross-team authorization bypass in two API sites: the asset materialization endpoint (POST /api/v2/assets/{asset_id}/materialize) and the XCom result check on wait_dag_run_until_finished. Unlike all other authorization points, these two sites resol...

CVE-2026-49487

Apache Airflow versions before 3.3.0 are vulnerable to information disclosure via the REST API task-instance detail and list endpoints . The root cause is that these endpoints return a deferred task's trigger kwargs without masking. If a deferred operator includes a secret, such as a provider API...

CVE-2025-27555

Apache Airflow versions prior to 2.11.1 are vulnerable to a log information disclosure flaw. When sensitive connection parameters are set via the Airflow CLI , the values are recorded in the audit logs and stored unencrypted within the Airflow database. This allows authenticated users with audit ...

CVE-2026-59242

Apache Airflow prior to 3.3.1 is vulnerable to deserialization of untrusted data (CWE-502) in its XCom GET /api/v2/{...}/xcomEntries/{key}?deserialize=true endpoint. The endpoint passed a string-literal payload through BaseXCom.deserialize_value without the _check_forbidden_xcom_keys guard, allow...

CVE-2026-54183

Apache Airflow contains a vulnerability where the secrets masker fails to hide sensitive values in the Variables UI when those values are nested within lists, tuples, or sets beyond a specific recursion-depth limit. This is an incomplete-fix follow-up to CVE-2026-42358 . While the exposure is lim...

CVE-2026-59244

CVE-2026-59244 affects Apache Airflow: the secrets masker fails to mask nested Variable values when rendered in the Rendered Templates UI if var.json contains a dict, because the value bypasses an isinstance(str) guard. This can expose sensitive data stored as a JSON Variable to users with access...

CVE-2026-68970

Apache Airflow's Task SDK failed to mask Variable contents when the deserialized JSON value was a top-level list , exposing secrets in cleartext in task logs and the Rendered Templates UI. Masking was only applied for string and dict values. Any authenticated user able to read a task's logs or re...

CVE-2026-75158

Apache Airflow is vulnerable to an authorization bypass in the /assets/events API . The root cause is a missing filter restricting results to Dags the caller is authorized to read. Consequently, any authenticated user with asset-read access can enumerate asset events—including source Dag ID, task...