Apache Airflow vulnerabilities

CVE-2026-45192 [MEDIUM] CWE-200 CVE-2026-45192: A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed a A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's `extra` JSON blob under field names not present in the redaction allowlist (`DEFAULT_SENSITIVE_FIELDS`) — for example, official Slack-provider cre

CVE-2026-49487 [MEDIUM] CWE-200 CVE-2026-49487: In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a defe In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking. When a deferred operator passed a secret (for example a provider API key) into its trigger, any authenticated user with DAG-scoped task-instance read access for that DAG could read that secret in clear text

CVE-2025-27555 [MEDIUM] CVE-2025-27555: Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log a Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is l

CVE-2022-40604 [HIGH] CWE-134 CVE-2022-40604: In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possi In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

CVE-2023-22887 [MEDIUM] CWE-22 CVE-2023-22887: Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to per Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is n

CVE-2026-25219 [MEDIUM] CWE-200 CVE-2026-25219: The `access_key` and `connection_string` connection properties were not marked as sensitive names in The `access_key` and `connection_string` connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, those values could be seen in the logs. Azure Service Bus used those properties to store sensi

CVE-2025-66388 [MEDIUM] CWE-201 CVE-2025-66388: A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered t A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this issue.

CVE-2026-48828 [MEDIUM] CWE-200 CVE-2026-48828: The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `*_password` / `*_token` / `*_secret`) could not fire for JSON-decodable variable values. An authenticated UI/API user with bulk Variable read permission

CVE-2026-22922 [MEDIUM] CWE-648 CVE-2026-22922: Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenti Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access. Users are recommended to upgrade to Apache Airflow 3.1.7 or later, which resolves this issue.

CVE-2023-51702 [MEDIUM] CWE-312 CVE-2023-51702: Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a dictionary and sends it to the triggerer by storing it in metadata without any encryption. Additionally, if used with an Airflow version between 2.3.0 and 2.6.0, the configura

CVE-2026-42360 [MEDIUM] CVE-2026-42360: A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` / `token` / `secret` / `api_key` keys inside a JSON template structure) to be bypassed when the rendered field exceeded `[core] max_templated_field_length`: Airflow stringified the structure before redaction, losing the nested key context,

CVE-2020-17515 [MEDIUM] CVE-2020-17515: The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but the implemented fix in Airflow 1.10.13 did not fix the issue completely.

CVE-2023-42781 [MEDIUM] CVE-2023-42781: Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has ac Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. This is a different issue than CVE-2023-42663 but leading to similar outcome. Users of Apache Airflow are advised to upgrade to version 2.7.3 or newer to mitigate the ris

CVE-2023-42792 [MEDIUM] CWE-668 CVE-2023-42792: Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authent Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn't. Users of Apache Airflow are

CVE-2023-50783 [MEDIUM] CWE-284 CVE-2023-50783: Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated u Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are recommended to upgrade to 2.8.0, which fixes this issue

CVE-2021-28359 [MEDIUM] CVE-2021-28359: The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2. P

CVE-2025-54831 [MEDIUM] CWE-213 CVE-2025-54831: Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The in Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values. In Airflow 3.0.3, this model was unintentionally violated: sensitive connection information could

CVE-2025-65995 [MEDIUM] CWE-209 CVE-2025-65995: When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as secrets), they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue has been fixed in Airflow 3.1.4 and 2.11.1, and use

CVE-2026-42358 [MEDIUM] CVE-2026-42358: A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret- A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like `password`, `token`, `secret`, `api_key`) to be bypassed when the JSON value's nesting depth exceeded the shared secrets masker's recursion limit: the masker returned the original nested item before checking the sensitive key name. An

CVE-2020-17511 [MEDIUM] CWE-312 CVE-2020-17511: In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logg In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.