Apache Software Foundation Apache Airflow vulnerabilities

CVE-2022-38362 [HIGH] CVE-2022-38362: Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to ( Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.

CVE-2025-57735 [CRITICAL] CWE-613 CVE-2025-57735: When user logged out, the JWT token the user had authtenticated with was not invalidated, which coul When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should

CVE-2017-17836 [CRITICAL] CWE-255 CVE-2017-17836: In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who has limited access to airflow, whether it be via XSS or by leaving a machine unlocked can exfiltrate all credentials from the system.

CVE-2017-15720 [HIGH] CWE-20 CVE-2017-15720: In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.

CVE-2024-56373 [HIGH] CWE-94 CVE-2024-56373: DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in th DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which they should normally not be able to do, leading to potentially remote code execution in the context of web-server (server-side) as a result of a user viewing historical task information. T

CVE-2025-68675 [HIGH] CWE-532 CVE-2025-68675: In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such connections are rendered or printed to logs,

CVE-2026-30911 [HIGH] CWE-862 CVE-2026-30911: Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance. Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this i

CVE-2024-28746 [HIGH] CWE-281 CVE-2024-28746: Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which they do not have permission to access. Users of Apache Airflow are recommended to upgrade to version 2.8.3 or newer to mitigate the risk associated with t

CVE-2022-38054 [CRITICAL] CWE-384 CVE-2022-38054: In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was suscept In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.

CVE-2023-37379 [HIGH] CWE-200 CVE-2023-37379: Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user to access connection information and exploit the test connection feature by sending many requests, leading to a denial of service (DoS) condition on the se

CVE-2026-45360 [HIGH] CWE-502 CVE-2026-45360: Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_r Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_reference`) imported and dispatched arbitrary class paths drawn from DAG-author-controlled serialized state without an allowlist or plugin-registry gate. A DAG author whose code reaches the scheduler — the default on single-host deployments where the DAG

CVE-2026-28779 [HIGH] CWE-668 CVE-2026-28779: Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regar Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url. This allows any application co-hosted under the same domain to capture valid Airflow session tokens from HTTP request headers, allowing full session takeover without attacking Airflow itsel

CVE-2026-41084 [HIGH] CWE-639 CVE-2026-41084: A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_ A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against the `dag_id` resolved from the URL path while operating on the `dag_id` / `dag_run_id` extracted from request-body entity fields. An authenticated UI/API user with edit permission on one Dag could

CVE-2025-66236 [HIGH] CWE-532 CVE-2025-66236: Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security model of Airflow. Some assumptions the Deployment Manager could make were not clear or explicit enough, even though Airflow's intentions and security model of Airflow did not

CVE-2026-25917 [HIGH] CWE-502 CVE-2026-25917: Dag Authors, who normally should not be able to execute code in the webserver context could craft XC Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

CVE-2017-17835 [HIGH] CWE-352 CVE-2017-17835: In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.

CVE-2026-27173 [HIGH] CWE-538 CVE-2026-27173: JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only access to perform actions that were only available to running tasks via Task SDK and potentially allow to modify state of Airflow Database for tasks.

CVE-2022-41131 [HIGH] CWE-78 CVE-2022-41131: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider versions prior to 4.1.0. It also impacts any Apache Ai

CVE-2023-50943 [HIGH] CWE-502 CVE-2023-50943: Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to pois Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enable_xcom_pickling=False" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recomm

CVE-2026-31987 [HIGH] CWE-532 CVE-2026-31987: JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Use JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Users are advised to upgrade to Airflow version that contains fix. Users are recommended to upgrade to version 3.2.0, which fixes this issue.