Apache Software Foundation Apache Airflow
152 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-86473 | 3.0.0 – < 3.3.2 | Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry | CRITICAL 9.1 | 0.7 % | ||
| CVE-2026-75158 | < 3.3.2 | Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter | MEDIUM 4.3 | 0.6 % | ||
| CVE-2026-82355 | 3.3.0 – < 3.3.2 | Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation | MEDIUM 4.2 | 0.7 % | ||
| CVE-2026-75157 | < 3.3.2 | Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression) | HIGH 7.5 | 0.4 % | ||
| CVE-2026-59244 | < 3.3.1 | Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UI | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-58076 | 3.0.0 – < 3.3.1 | Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables DAG-… | HIGH 8.8 | 0.5 % | ||
| CVE-2026-59242 | < 3.3.1 | Apache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpoint | MEDIUM 5.4 | 0.5 % | ||
| CVE-2026-54183 | < 3.3.1 | Apache Airflow: Airflow Variables were not masked in the UI for authenticated users | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-67260 | 3.3.0 – < 3.3.1 | Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization | HIGH 7.3 | 0.8 % | ||
| CVE-2026-67587 | 3.3.0 – < 3.3.1 | Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget | HIGH 8.8 | 0.6 % | ||
| CVE-2026-65017 | 3.3.0 – < 3.3.1 | Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass) | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-68968 | < 3.3.1 | Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id | HIGH 7.5 | 0.4 % | ||
| CVE-2026-68969 | < 3.3.1 | Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-68970 | < 3.3.1 | Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UI | MEDIUM 6.5 | 0.2 % | ||
| CVE-2026-68971 | < 3.3.1 | Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-68076 | < 3.3.1 | Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection | MEDIUM 5.4 | 0.3 % | ||
| CVE-2026-33264 | < 3.3.0 | Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize() | CRITICAL 9.8 | 1.6 % | ||
| CVE-2026-49487 | < 3.3.0 | Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-48828 | < 3.3.0 | Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-49296 | 3.0.0 – < 3.3.0 | Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id} | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-48891 | < 3.3.0 | Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target | MEDIUM 4.3 | 0.6 % | ||
| CVE-2026-48892 | < 3.3.0 | Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-40861 | < 3.2.2 | Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-40961 | 3.0.0 – < 3.2.2 | Apache Airflow: Open Redirect Bypass Vulnerability | HIGH 7.2 | 0.6 % | ||
| CVE-2026-40963 | 3.0.0 – < 3.2.2 | Apache Airflow: DAG authorization bypass on /ui/structure/structure_data | LOW 3.1 | 0.5 % | ||
| CVE-2026-41014 | 3.2.0 – < 3.2.2 | Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-49267 | 2.0.0 – < 3.2.2 | Apache Airflow: No certificate validation on SMTP STARTTLS connections | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-41017 | 3.0.0 – < 3.2.2 | Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-41084 | 3.2.0 – < 3.2.2 | Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutation | HIGH 7.5 | 0.5 % | ||
| CVE-2026-42252 | 3.0.0 – < 3.2.2 | Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-42360 | < 3.2.2 | Apache Airflow: Rendered template truncation bypasses nested sensitive-key masking | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-42358 | < 3.2.2 | Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secrets | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-42359 | 3.2.0 – < 3.2.2 | Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator | HIGH 8.8 | 0.6 % | ||
| CVE-2026-45360 | < 3.2.2 | Apache Airflow: Arbitrary import in custom deadline-reference deserialization | HIGH 7.3 | 0.7 % | ||
| CVE-2026-45426 | 3.0.0 – < 3.2.2 | Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access | LOW 3.1 | 0.4 % | ||
| CVE-2026-46764 | < 3.2.2 | Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filter | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-48726 | < 3.2.2 | Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-49298 | < 3.2.2 | Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments | HIGH 8.8 | 0.5 % | ||
| CVE-2026-45192 | < 3.2.2 | Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API Response | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-38743 | < 3.2.1 | Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-40690 | < 3.2.1 | Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users | MEDIUM 4.3 | 0.4 % | ||
| CVE-2026-32690 | 3.0.0 – < 3.2.0 | Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1 | LOW 3.7 | 0.4 % | ||
| CVE-2026-30898 | < 3.2.0 | Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf | HIGH 8.8 | 0.8 % | ||
| CVE-2026-30912 | < 3.2.0 | Apache Airflow: Exposing stack trace in case of constraint error | HIGH 7.5 | 0.4 % | ||
| CVE-2026-25917 | < 3.2.0 | Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5) | HIGH 7.2 | 0.8 % | ||
| CVE-2026-32228 | 3.0.0 – < 3.2.0 | Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access to | HIGH 7.5 | 0.4 % | ||
| CVE-2026-31987 | 3.0.0 – < 3.2.0 | Apache Airflow: JWT token appearing in logs | HIGH 7.5 | 0.7 % | ||
| CVE-2026-25219 | < 3.1.8 | Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-54550 | < 3.2.0 | Apache Airflow: RCE by race condition in example_xcom dag | HIGH 8.1 | 0.6 % | ||
| CVE-2026-33858 | 3.1.8 – < 3.2.0 | Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API | HIGH 8.8 | 0.6 % | ||
| CVE-2025-66236 | 3.0.0 – < 3.2.0 | Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI | HIGH 7.5 | 0.4 % | ||
| CVE-2025-57735 | 3.0.0 – < 3.2.0 | Apache Airflow: Airflow Logout Not Invalidating JWT | CRITICAL 9.1 | 0.7 % | ||
| CVE-2026-34538 | 3.0.0 – < 3.2.0 | Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure) | MEDIUM 6.5 | 0.7 % | ||
| CVE-2026-28563 | 3.0.0 – < 3.1.8 | Apache Airflow: DAG authorization bypass | MEDIUM 4.3 | 0.5 % | ||
| CVE-2026-26929 | 3.0.0 – < 3.1.8 | Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-30911 | 3.1.0 – < 3.1.8 | Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization | HIGH 8.1 | 0.6 % | ||
| CVE-2026-28779 | 3.0.0 – < 3.1.8 | Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications | HIGH 7.5 | 0.7 % | ||
| CVE-2025-27555 | < 2.11.1 | Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli | MEDIUM 6.5 | 0.4 % | ||
| CVE-2024-56373 | < 2.11.1 | Apache Airflow: SSTI to Code Execution in Airflow through Shared DB Information | HIGH 8.4 | 1.2 % | ||
| CVE-2025-65995 | 3.0.0 – < 3.1.4 ; < 2.11.1 | Apache Airflow: Disclosure of secrets to UI via kwargs | MEDIUM 6.5 | 0.9 % | ||
| CVE-2026-22922 | 3.1.0 – < 3.1.7 | Apache Airflow: Airflow externalLogUrl Permission Bypass | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-24098 | 3.0.0 – < 3.1.7 | Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors | MEDIUM 6.5 | 0.8 % | ||
| CVE-2025-68675 | 3.0.0 – < 3.1.6 ; < 2.11.1 | Apache Airflow: proxy credentials for various providers might leak in task logs | HIGH 7.5 | 1.9 % | ||
| CVE-2025-68438 | 3.1.0 – < 3.1.6 | Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated | HIGH 7.5 | 0.6 % | ||
| CVE-2025-66388 | 3.1.0 – < 3.1.4 | Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI | MEDIUM 6.5 | 0.5 % | ||
| CVE-2025-54941 | 3.0.0 – < < 3.0.5 | Apache Airflow: Command injection in "example_dag_decorator" | MEDIUM 4.6 | 0.5 % | ||
| CVE-2025-62402 | 3.0.0 – < 3.1.1 | Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API | MEDIUM 5.4 | 0.5 % | ||
| CVE-2025-62503 | 3.0.0 – < 3.1.1 | Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables) | MEDIUM 4.6 | 0.4 % | ||
| CVE-2025-54831 | 3.0.3 | Apache Airflow: Connection sensitive details exposed to users with READ permissions | MEDIUM 6.5 | 0.9 % | ||
| CVE-2024-45784 | < 2.10.3 | Apache Airflow: Sensitive configuration values are not masked in the logs by default | HIGH 7.5 | 1.3 % | ||
| CVE-2024-50378 | < 2.10.3 | Apache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli | MEDIUM 4.9 | 1.2 % | ||
| CVE-2024-45034 | < 2.10.1 | Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes | HIGH 8.8 | 1.7 % | ||
| CVE-2024-45498 | 2.10.0 | Apache Airflow: Command Injection in an example DAG | HIGH 8.8 | 1.2 % | ||
| CVE-2024-41937 | < 2.10.0 | Apache Airflow: Stored XSS Vulnerability on provider link | MEDIUM 6.1 | 1.7 % | ||
| CVE-2024-39877 | 2.4.0 – < 2.9.3 | Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler | HIGH 8.8 | 1.7 % | ||
| CVE-2024-39863 | < 2.9.3 | Apache Airflow: Potential XSS Vulnerability | HIGH 8.1 | 1.0 % | ||
| CVE-2024-25142 | < 2.9.2 | Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache | MEDIUM 5.5 | 0.3 % | ||
| CVE-2024-32077 | 2.9.0 – < 2.9.1 | Apache Airflow: XSS vulnerability in Task Instance Log/Log Details | MEDIUM 5.4 | 1.6 % | ||
| CVE-2024-31869 | 2.7.0 – 2.8.4 | Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used | MEDIUM 5.3 | 1.1 % | ||
| CVE-2024-29735 | 2.8.2 – 2.8.3 | Apache Airflow: Potentially harmful permission changing by log task handler | MEDIUM 5.3 | 1.5 % | ||
| CVE-2024-28746 | 2.8.0 – < 2.8.3 | Apache Airflow: Ignored Airflow Permissions | HIGH 8.1 | 1.3 % | ||
| CVE-2024-26280 | < 2.8.2 | Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs) | MEDIUM 4.7 | 1.9 % | ||
| CVE-2024-27906 | < 2.8.2 | Apache Airflow: Dag Code and Import Error Permissions Ignored | MEDIUM 5.9 | 0.3 % | ||
| CVE-2023-50944 | < 2.8.1 | Apache Airflow: Bypass permission verification to read code of other dags | MEDIUM 6.5 | 1.0 % | ||
| CVE-2023-50943 | < 2.8.1 | Apache Airflow: Potential pickle deserialization vulnerability in XComs | HIGH 7.5 | 1.2 % | ||
| CVE-2023-51702 | 2.3.0 – < 2.6.1 | Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logge… | MEDIUM 6.5 | 0.4 % | ||
| CVE-2023-48291 | < 2.8.0 | Apache Airflow: Improper access control to DAG resources | MEDIUM 4.3 | 1.8 % | ||
| CVE-2023-50783 | < 2.8.0 | Apache Airflow: Improper access control vulnerability on the "varimport" endpoint | MEDIUM 6.5 | 1.4 % | ||
| CVE-2023-47265 | 2.6.0 – < 2.8.0 | Apache Airflow: DAG Params alllow to embed unchecked Javascript | MEDIUM 5.4 | 1.3 % | ||
| CVE-2023-49920 | 2.7.0 – < 2.8.0 | Apache Airflow: Missing CSRF protection on DAG/trigger | MEDIUM 6.5 | 1.0 % | ||
| CVE-2023-42781 | < 2.7.3 | Apache Airflow: Permission verification bypass allows viewing dagruns of other dags | MEDIUM 6.5 | 1.7 % | ||
| CVE-2023-47037 | < 2.7.3 | Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access) | MEDIUM 4.3 | 1.5 % | ||
| CVE-2023-46215 | 1.10.0 – < 2.7.0 | Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as C… | HIGH 7.5 | 1.2 % | ||
| CVE-2023-46288 | 2.4.0 – < 2.7.0 | Apache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set | MEDIUM 4.3 | 1.8 % | ||
| CVE-2023-42663 | < 2.7.2 | Apache Airflow: Bypass permission verification to view task instances of other dags | MEDIUM 6.5 | 2.0 % | ||
| CVE-2023-42792 | < 2.7.2 | Apache Airflow: Improper access control to DAG resources | MEDIUM 6.5 | 1.9 % | ||
| CVE-2023-45348 | 2.7.0 – < 2.7.2 | Apache Airflow: Configuration information leakage vulnerability | MEDIUM 4.3 | 1.6 % | ||
| CVE-2023-42780 | < 2.7.2 | Apache Airflow: Improper access control vulnerability in the "List dag warnings" feature | MEDIUM 6.5 | 1.4 % | ||
| CVE-2023-40712 | < 2.7.1 | Apache Airflow: Secrets can be unmasked in the "Rendered Template" | MEDIUM 6.5 | 2.0 % | ||
| CVE-2023-40611 | < 2.7.1 | Apache Airflow Dag Runs Broken Access Control Vulnerability | MEDIUM 4.3 | 1.7 % | ||
| CVE-2023-39441 | < 2.7.0 | Apache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certi… | MEDIUM 5.9 | 0.8 % | ||
| CVE-2023-37379 | < 2.7.0 | Apache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature | HIGH 8.1 | 2.0 % | ||
| CVE-2023-40273 | < 2.7.0 | Session fixation in Apache Airflow web interface | HIGH 8.0 | 1.8 % | ||
| CVE-2023-39508 | < 2.6.0 | Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges | HIGH 8.8 | 2.6 % | ||
| CVE-2023-22888 | < 2.6.3 | Apache Airflow: Scheduler remote DoS | MEDIUM 6.5 | 1.4 % | ||
| CVE-2023-36543 | < 2.6.3 | Apache Airflow: ReDoS via dags function | MEDIUM 6.5 | 1.6 % | ||
| CVE-2022-46651 | < 2.6.3 | Apache Airflow: Security vulnerability on AirFlow Connections | MEDIUM 6.5 | 1.2 % | ||
| CVE-2023-22887 | < 2.6.3 | Apache Airflow path traversal by authenticated user | MEDIUM 6.5 | 1.8 % | ||
| CVE-2023-35908 | < 2.6.3 | Apache Airflow: Access to DAGs without relevant permission | MEDIUM 6.5 | 1.0 % | ||
| CVE-2023-35005 | 2.5.0 – < 2.6.2 | Apache Airflow: Information disclosure on configuration view | MEDIUM 6.5 | 1.5 % | ||
| CVE-2023-25754 | < 2.6.0 | Apache Airflow: Privilege escalation using airflow logs | CRITICAL 9.8 | 2.3 % | ||
| CVE-2023-29247 | < 2.6.0 | Stored XSS on Apache Airflow | MEDIUM 5.4 | 2.0 % | ||
| CVE-2023-25695 | < 2.5.2 | Information disclosure in Apache Airflow | MEDIUM 5.3 | 1.4 % | ||
| CVE-2023-22884 | < 2.5.1 | Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow | CRITICAL 9.8 | 11 % | ||
| CVE-2022-41131 | 2.3.0 | Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection) | HIGH 7.8 | 1.8 % | ||
| CVE-2022-40954 | unspecified – < 2.3.0 | Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files | MEDIUM 5.5 | 1.4 % | ||
| CVE-2022-40189 | unspecified – < 2.3.0 | Apache Airlfow Pig Provider RCE | CRITICAL 9.8 | 4.2 % | ||
| CVE-2022-38649 | unspecified – < 2.3.0 | Apache Airflow Pinot provider allowed Command Injection | CRITICAL 9.8 | 3.4 % | ||
| CVE-2022-45402 | unspecified – < 2.4.3 | Apache Airflow: Open redirect during login | MEDIUM 6.1 | 82 % | ||
| CVE-2022-40127 | Apache Airflow – < 2.4.0 | Apache Airflow <2.4.0 has an RCE in a bash example | HIGH 8.8 | 86 % | ||
| CVE-2022-27949 | unspecified – < 2.3.1 | Apache Airflow prior to 2.3.1 may include sensitive values in rendered template | HIGH 7.5 | 2.0 % | ||
| CVE-2022-43985 | unspecified – < 2.4.2 | Apache Airflow prior to 2.4.2 has an open redirect | MEDIUM 6.1 | 1.6 % | ||
| CVE-2022-43982 | unspecified – < 2.4.2 | Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL | MEDIUM 6.1 | 1.6 % | ||
| CVE-2022-41672 | unspecified – 2.4.0 | Session still functional after user is deactivated | HIGH 8.1 | 1.5 % | ||
| CVE-2022-40754 | unspecified – < 2.4.0 ; 2.3.0 – < unspecified | Open Redirect | MEDIUM 6.1 | 1.8 % | ||
| CVE-2022-40604 | unspecified – < 2.4.0 ; 2.3.0 – < unspecified | Format String Vulnerability | HIGH 7.5 | 2.1 % | ||
| CVE-2022-38170 | Apache Airflow – 2.3.3 | Overly permissive umask for daemons | MEDIUM 4.7 | 0.6 % | ||
| CVE-2022-38054 | 2.2.4 – < Apache Airflow* | Session Fixation | CRITICAL 9.8 | 2.2 % | ||
| CVE-2022-38362 | Apache Airflow Docker Provider – < 3.0.0 | Docker Provider <3.0 RCE vulnerability in example dag | HIGH 8.8 | 1.9 % | ||
| CVE-2022-24288 | unspecified – < 2.2.4 | Apache Airflow: RCE in example DAGs | HIGH 8.8 | 78 % | ||
| CVE-2021-45229 | unspecified – < 2.2.4 | Apache Airflow: Reflected XSS via Origin Query Argument in URL | MEDIUM 6.1 | 2.6 % | ||
| CVE-2021-45230 | Apache Airflow 1.10 1.10.0 to 1.10.15 ; Apache Airflow 2 – < 2.2.0 | Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver | MEDIUM 6.5 | 1.7 % | ||
| CVE-2021-38540 | Apache Airflow – < 2.1.3 | Apache Airflow: Variable Import endpoint missed authentication check | CRITICAL 9.8 | 81 % | ||
| CVE-2021-35936 | Apache Airflow – < 2.1.2 | No Authentication on Logging Server | MEDIUM 5.3 | 5.5 % | ||
| CVE-2021-28359 | Apache Airflow 2.0.0 ; Apache Airflow 2.0.1 ; Apache Airflow – < 1.10.15 | Apache Airflow Reflected XSS via Origin Query Argument in URL | MEDIUM 6.1 | 14 % | ||
| CVE-2021-26697 | Apache Airflow 2.0.0 | Apache Airflow: Lineage API endpoint for Experimental API missed authentication check | MEDIUM 5.3 | 4.6 % | ||
| CVE-2021-26559 | Apache Airflow 2.0.0 | CWE-284 Improper Access Control on Configurations Endpoint for the Stable API | MEDIUM 6.5 | 2.8 % | ||
| CVE-2020-17526 | Apache Airflow – < 1.10.14 | Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on si | HIGH 7.7 | 24 % | ||
| CVE-2020-17513 | Apache Airflow – < 1.10.13 | In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack. | MEDIUM 5.3 | 4.4 % | ||
| CVE-2020-17511 | Apache Airflow – < 1.10.13 | In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Air | MEDIUM 6.5 | 2.6 % | ||
| CVE-2020-17515 | Apache Airflow – < 1.10.13 | The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow vers | MEDIUM 6.1 | 16 % | ||
| CVE-2020-9485 | 1.10.10 and below | An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "cl | MEDIUM 6.1 | 2.8 % | ||
| CVE-2020-11983 | 1.10.10 and below | An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC | MEDIUM 5.4 | 1.8 % | ||
| CVE-2020-11982 | 1.10.10 and below | An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, R | CRITICAL 9.8 | 7.2 % | ||
| CVE-2020-11981 | 1.10.10 and below | An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, | CRITICAL 9.8 | 37 % | ||
| CVE-2020-11978 | 1.10.10 and below | An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the | HIGH 8.8 | 99 % | KEV | |
| CVE-2018-20244 | Apache Airflow <= 1.10.1 | In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrar | MEDIUM 5.5 | 2.0 % | ||
| CVE-2018-20245 | Apache Airflow <= 1.10.0 | The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper chec | HIGH 7.5 | 1.0 % | ||
| CVE-2017-17836 | Apache Airflow <= 1.8.2 | In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used | CRITICAL 9.8 | 3.2 % | ||
| CVE-2017-17835 | Apache Airflow <= 1.8.2 | In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow. | HIGH 8.8 | 2.0 % | ||
| CVE-2017-15720 | Apache Airflow <= 1.8.2 | In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object. | HIGH 8.8 | 2.5 % | ||
| CVE-2017-12614 | < 1.9.0 | It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS atte | MEDIUM 6.1 | 2.0 % |