CVE-2026-49487
published 2026-07-07CVE-2026-49487: In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking. When a deferred…
PriorityP341medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.66%
47.5th percentile
In Apache Airflow before 3.3.0, the REST API task-instance detail and list
endpoints returned a deferred task's trigger kwargs without masking. When a
deferred operator passed a secret (for example a provider API key) into its
trigger, any authenticated user with DAG-scoped task-instance read access for
that DAG could read that secret in clear text while the task was deferred.
Users should upgrade to apache-airflow 3.3.0 or later, which masks sensitive
values in trigger kwargs returned by the API.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | airflow | < 3.3.0 | 3.3.0 |
| apache_software_foundation | apache_airflow | < 3.3.0 | 3.3.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache Airflow up to 3.2.x REST API information disclosure (WID-SEC-2026-2223)
vuldb·2026-07-08·CVSS 6.5
CVE-2026-49487 [MEDIUM] Apache Airflow up to 3.2.x REST API information disclosure (WID-SEC-2026-2223)
A vulnerability, which was classified as problematic, has been found in Apache Airflow up to 3.2.x. Affected by this vulnerability is an unknown functionality of the component REST API. Performing a manipulation results in information disclosure.
This vulnerability is cataloged as CVE-2026-49487. It is possible to initiate the attack remotely. There is no exploit available.
GHSA
In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking.
ghsa_unreviewed·2026-07-07
CVE-2026-49487 [MEDIUM] CWE-200 In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking.
In Apache Airflow before 3.3.0, the REST API task-instance detail and list
endpoints returned a deferred task's trigger kwargs without masking. When a
deferred operator passed a secret (for example a provider API key) into its
trigger, any authenticated user with DAG-scoped task-instance read access for
that DAG could read that secret in clear text while the task was deferred.
Users should upgrade to apache-airflow 3.3.0 or later, which masks sensitive
values in trigger kwargs returned by the API.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-07
Published