Apache Airflow vulnerabilities

CVE-2023-40712 [MEDIUM] CWE-200 CVE-2023-40712: Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated user Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the secret configuration of the task that otherwise would be masked in the UI. Users are strongly advised to upgrade to version 2.7.1 or later which has re

CVE-2023-22887 [MEDIUM] CWE-22 CVE-2023-22887: Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to per Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is n

CVE-2023-42781 [MEDIUM] CVE-2023-42781: Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has ac Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. This is a different issue than CVE-2023-42663 but leading to similar outcome. Users of Apache Airflow are advised to upgrade to version 2.7.3 or newer to mitigate the ris

CVE-2023-42780 [MEDIUM] CWE-200 CVE-2023-42780: Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no permission to see those DAGs. It would reveal the dag_ids and the stack-traces of import errors for those DAGs with import errors. Users of Apache Airflow are advised to upgrade

CVE-2023-50783 [MEDIUM] CWE-284 CVE-2023-50783: Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated u Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are recommended to upgrade to 2.8.0, which fixes this issue

CVE-2025-65995 [MEDIUM] CWE-209 CVE-2025-65995: When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as secrets), they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue has been fixed in Airflow 3.1.4 and 2.11.1, and use

CVE-2025-66388 [MEDIUM] CWE-201 CVE-2025-66388: A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered t A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this issue.

CVE-2023-51702 [MEDIUM] CWE-312 CVE-2023-51702: Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a dictionary and sends it to the triggerer by storing it in metadata without any encryption. Additionally, if used with an Airflow version between 2.3.0 and 2.6.0, the configura

CVE-2026-42358 [MEDIUM] CWE-200 CVE-2026-42358: A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret- A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like `password`, `token`, `secret`, `api_key`) to be bypassed when the JSON value's nesting depth exceeded the shared secrets masker's recursion limit: the masker returned the original nested item before checking the sensitive key n

CVE-2026-59242 [MEDIUM] CWE-502 CVE-2026-59242: Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a strin Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user with XCom write-and-read access to instantiate arbitrary `airflow.*` classes on the API server (CWE-502). An auth

CVE-2020-17511 [MEDIUM] CWE-312 CVE-2020-17511: In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logg In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection with a password field.

CVE-2023-35005 [MEDIUM] CWE-200 CVE-2023-35005: In Apache Airflow, some potentially sensitive values were being shown to the user in certain situati In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations. This vulnerability is mitigated by the fact configuration is not shown in the UI by default (only if `[webserver] expose_config` is set to `non-sensitive-only`), and not all uncensored values are actually sentitive. This issue affects Apache A

CVE-2022-46651 [MEDIUM] CWE-200 CVE-2022-46651: Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized ac Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the connection to exploit it. Users should upgrade to version

CVE-2023-50944 [MEDIUM] CWE-862 CVE-2023-50944: Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to acc Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access. This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which fixes this issue.

CVE-2026-68970 [MEDIUM] CVE-2026-68970: Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so sec Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI. Masking was applied only when the deserialized value was a string or a dict; a list at the top level matched neither and was returned unmasked. Any authenticated us

CVE-2026-41017 [MEDIUM] CWE-614 CVE-2026-41017: Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deploy Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g. nginx / Envoy / a managed load balancer that terminates TLS and forwards plaintext to the API server, the default cloud-native topology) would have the user's session

CVE-2023-36543 [MEDIUM] CWE-1333 CVE-2023-36543: Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use craft Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected

CVE-2019-0229 [HIGH] CWE-352 CVE-2019-0229: A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate pr A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks.

CVE-2025-54831 [MEDIUM] CWE-213 CVE-2025-54831: Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The in Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values. In Airflow 3.0.3, this model was unintentionally violated: sensitive connection information could

CVE-2026-59244 [MEDIUM] CWE-312 CVE-2026-59244: Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an `isinstance(str)` guard — so a secret stored as a JSON Variable and referenced in a template via `var.json` was displayed in cleartext to any user with access to that task's Rendered Templates view. Us