CVE-2026-28563
published 2026-03-17CVE-2026-28563: Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This…
PriorityP424medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.44%
35.4th percentile
Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.
Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | airflow | < 3.3.0 | 3.3.0 |
| apache | airflow | >= 3.0.0 < 3.1.8 | 3.1.8 |
| apache_software_foundation | apache_airflow | < 3.3.0 | 3.3.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `de
ghsa_unreviewed·2026-07-07·CVSS 4.3
CVE-2026-48891 [MEDIUM] CWE-200 A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `de
A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep.source` and `dep.target` fields of trigger / sensor dependency entries. An authenticated UI user with read permission on some Dags could enumerate the identifiers of other Dags they were not authorized to read by inspecting the dependency graph for trigger / sensor references. Affects deployments that rely on per-Dag read scoping to keep Dag identifiers private across teams. This is a residual gap in the fix for CVE-2026-28563, which filtered the top-level Dag key but did not propagate the filter into the trigger / sensor dep-source / dep-target fields. Users who already upgraded for CVE-202
OSV
Apache Airflow: DAG authorization bypass
osv·2026-03-17
CVE-2026-28563 [MEDIUM] Apache Airflow: DAG authorization bypass
Apache Airflow: DAG authorization bypass
Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.
Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.
GHSA
Apache Airflow: DAG authorization bypass
ghsa·2026-03-17
CVE-2026-28563 [MEDIUM] CWE-732 Apache Airflow: DAG authorization bypass
Apache Airflow: DAG authorization bypass
Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.
Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.
No detection rules found.
No public exploits indexed.
Wiz
CVE-2026-28563 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-28563 [MEDIUM] CVE-2026-28563 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28563 :
Apache Airflow vulnerability analysis and mitigation
Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without filtering by authorized DAG IDs. This allows an authenticated user with only DAG Dependencies permission to enumerate DAGs they are not authorized to view.
Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.
Source : NVD
## 4.3
Score
Published March 17, 2026
Severity MEDIUM
CNA Score 4.3
Affected Technologies
Apache Airflow
Homebrew
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 15.6
Exploitation Probability (EPSS) 0.1
Affected packages and libraries
ai
Wiz
CVE-2025-68675 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2025-68675 [HIGH] CVE-2025-68675 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-68675 :
Apache Airflow vulnerability analysis and mitigation
In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such connections are rendered or printed to logs, proxy credentials embedded in these fields could be exposed.
Users are recommended to upgrade to 3.1.6 or later for Airflow 3, and 2.11.1 or later for Airflow 2 which fixes this issue
Source : NVD
## 7.5
Score
Published January 16, 2026
Severity HIGH
CNA Score 7.5
Affected Technologies
Apache Airflow
Wolfi
Has Public Exploit No
Has CISA KEV Exploit No
CIS
Wiz
CVE-2024-56373 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 8.4
CVE-2024-56373 [HIGH] CVE-2024-56373 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2024-56373 :
Apache Airflow vulnerability analysis and mitigation
DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which they should normally not be able to do, leading to potentially remote code execution in the context of web-server (server-side) as a result of a user viewing historical task information.
The functionality responsible for that (log template history) has been disabled by default in 2.11.1 and users should upgrade to Airflow 3 if they want to continue to use log template history. They can also manually modify historical log file names if they want to see historical logs that were generated before the last log template change.
Source : NVD
## 8.4
Score
Wiz
CVE-2025-66388 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2025-66388 [MEDIUM] CVE-2025-66388 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-66388 :
Apache Airflow vulnerability analysis and mitigation
A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization.
Users are recommended to upgrade to version 3.1.4, which fixes this issue.
Source : NVD
## 6.5
Score
Published December 15, 2025
Severity MEDIUM
CNA Score 4.3
Affected Technologies
Apache Airflow
Homebrew
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 11.7
Exploitation Probability (EPSS) N/A
Affected packages and libraries
airflow
airflow-3
Sources
NVD
pip Severity MEDIUM Has Fi
Wiz
CVE-2025-27555 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 4.9
CVE-2025-27555 [MEDIUM] CVE-2025-27555 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-27555 :
Apache Airflow vulnerability analysis and mitigation
Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is limited to users with audit log access, it is recommended to upgrade to Airflow 2.11.1 or a later version, which addresses this issue. Users who previously used the CLI to set connections should manually delete entries with those connection sensitive values from the log table. This is similar but not the same issue as CVE-2024-50378
Source : NVD
## 6.5
Score
Wiz
CVE-2026-28779 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-28779 [MEDIUM] CVE-2026-28779 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-28779 :
Apache Airflow vulnerability analysis and mitigation
Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.
This allows any application co-hosted under the same domain to capture valid Airflow session tokens from HTTP request headers, allowing full session takeover without attacking Airflow itself.
Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.
Source : NVD
## 7.5
Score
Published March 17, 2026
Severity HIGH
CNA Score 7.5
Affected Technologies
Apache Airflow
Homebrew
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EP
Wiz
CVE-2026-24098 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-24098 [MEDIUM] CVE-2026-24098 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-24098 :
Apache Airflow vulnerability analysis and mitigation
Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Dags they did not have access to.
Users are advised to upgrade to 3.1.7 or later, which resolves this issue
Source : NVD
## 6.5
Score
Published February 9, 2026
Severity MEDIUM
CNA Score 6.5
Affected Technologies
Apache Airflow
Homebrew
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 6.4
Exploitation Probability (EPSS) N/A
Affected packages and libraries
airflow
apache-airflow
Sources
NVD
pip Severity MEDIUM Has Fix Added at: Feb
Wiz
CVE-2026-32794 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-32794 [MEDIUM] CVE-2026-32794 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-32794 :
Apache Airflow vulnerability analysis and mitigation
Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate certificates for connections to Databricks back-end which could result in a man-of-a-middle attack that traffic is intercepted and manipulated or credentials exfiltrated w/o notice.
This issue affects Apache Airflow Provider for Databricks: from 1.10.0 before 1.12.0.
Users are recommended to upgrade to version 1.12.0, which fixes the issue.
Source : NVD
## 4.8
Score
Published March 30, 2026
Severity MEDIUM
CNA Score 4.8
Affected Technologies
Apache Airflow
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percenti
Wiz
CVE-2025-65995 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2025-65995 [MEDIUM] CVE-2025-65995 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-65995 :
Apache Airflow vulnerability analysis and mitigation
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as secrets), they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG.
The issue has been fixed in Airflow 3.1.4 and 2.11.1, and users are strongly advised to upgrade to prevent potential disclosure of sensitive information.
Source : NVD
## 6.5
Score
Published February 21, 2026
Severity MEDIUM
CNA Score 6.5
Affected Technologies
Apache Airflow
Chainguard
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (E
Wiz
CVE-2026-26929 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-26929 [MEDIUM] CVE-2026-26929 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-26929 :
Apache Airflow vulnerability analysis and mitigation
Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "~" (wildcard for all DAGs). As a result, version metadata of DAGs that the requester is not authorized to access is returned.
Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.
Source : NVD
## 6.5
Score
Published March 17, 2026
Severity MEDIUM
CNA Score 6.5
Affected Technologies
Apache Airflow
Homebrew
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 16.8
Exploitation Probability (EPSS) 0.1
Affected packa
Wiz
CVE-2026-22922 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-22922 [MEDIUM] CVE-2026-22922 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-22922 :
Apache Airflow vulnerability analysis and mitigation
Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access.
Users are recommended to upgrade to Apache Airflow 3.1.7 or later, which resolves this issue.
Source : NVD
## 6.5
Score
Published February 9, 2026
Severity MEDIUM
CNA Score 6.5
Affected Technologies
Apache Airflow
Wolfi
Has Public Exploit Yes
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 9.1
Exploitation Probability (EPSS) N/A
Affected packages and libraries
airflow-3
airflow-core-3
Sources
NVD
Chainguard Has Fix Added a
Wiz
CVE-2025-68438 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 7.5
CVE-2025-68438 [HIGH] CVE-2025-68438 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2025-68438 :
Apache Airflow vulnerability analysis and mitigation
In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include user-registered mask_secret() patterns, so secrets were not reliably masked before truncation and display.
Users are recommended to upgrade to 3.1.6 or later, which fixes this issue
Source : NVD
## 7.5
Score
Published January 16, 2026
Severity HIGH
CNA Score 7.5
Affected Technologies
Apache Airflow
Wolfi
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Explo
Wiz
CVE-2026-30911 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 6.5
CVE-2026-30911 [MEDIUM] CVE-2026-30911 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-30911 :
Apache Airflow vulnerability analysis and mitigation
Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.
Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.
Source : NVD
## 8.1
Score
Published March 17, 2026
Severity HIGH
CNA Score 8.1
Affected Technologies
Apache Airflow
Homebrew
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 12.9
Exploitation Probability (EPSS) N/A
Affected packages and libraries
airflow-3
ap
2026-03-17
Published