CVE-2026-30912: In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing…

PriorityP344high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

0.45%

36.2th percentile

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	airflow	< 3.2.0	3.2.0
apache_software_foundation	apache_airflow	< 3.2.0	3.2.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.