Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

apache-airflow-core

66 known vulnerabilities (4 critical, 22 high, 37 medium, 3 low), with the versions each affects and the releases that fix them.

Latest release
3.4.0 (Nov 6, 2026): no advisory affects it
Newest unaffected release
3.4.0 (Nov 6, 2026), the latest release
Advisories
66 · 4 critical, 22 high, 37 medium, 3 low
Weekly downloads
649.3K
Dependents
475
Releases
86 since 3.0.0 (Apr 22, 2025)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Show all 66 advisoriesShow fewer advisories
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 66

  • CVE-2026-86473Critical 9.1

    Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry

    Affected: from 3.0.0, fixed in 3.3.2.

    Fixed in 3.3.2 (released Sep 17, 2026, 4 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-75158Medium 4.3

    Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter

    Affected: from 3.0.0, fixed in 3.3.2.

    Fixed in 3.3.2 (released Sep 17, 2026, 4 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-82355Medium 4.2

    Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation

    Affected: from 3.3.0, fixed in 3.3.2.

    Fixed in 3.3.2 (released Sep 17, 2026, 4 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

    Affected: from 3.0.0, fixed in 3.3.2.

    Fixed in 3.3.2 (released Sep 17, 2026, 1 day before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59244Medium 6.5

    Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UI

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables…

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-59242Medium 5.4

    Apache Airflow: Arbitrary airflow. class instantiation on the API server via the XCom deserialize endpoint

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-54183Medium 4.3

    Apache Airflow: Airflow Variables were not masked in the UI for authenticated users

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

    Affected: from 3.3.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget

    Affected: from 3.3.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-65017Medium 6.5

    Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)

    Affected: from 3.3.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-68969Medium 6.5

    Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-68970Medium 6.5

    Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UI

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-68971Medium 6.5

    Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

Show all 66 advisoriesShow fewer advisories
  • CVE-2026-68076Medium 5.4

    Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection

    Affected: from 3.0.0, fixed in 3.3.1.

    Fixed in 3.3.1 (released Aug 12, 2026, the day of disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-33264Critical 9.8

    Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()

    Affected: from 3.0.0, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jul 6, 2026, 1 day before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-49487Medium 6.5

    Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs

    Affected: from 3.0.0, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jul 6, 2026, 1 day before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-48828Medium 6.5

    Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key

    Affected: from 3.0.0, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jul 6, 2026, 1 day before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-49296Medium 6.5

    Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

    Affected: from 3.0.0, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jul 6, 2026, 1 day before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-48891Medium 4.3

    Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target

    Affected: from 3.0.0, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jul 6, 2026, 1 day before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-48892Medium 6.5

    Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options

    Affected: from 3.0.0, fixed in 3.3.0.

    Fixed in 3.3.0 (released Jul 6, 2026, 1 day before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-40861Medium 6.5

    Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Open Redirect Bypass Vulnerability

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: DAG authorization bypass on /ui/structure/structure_data

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-41014Medium 4.3

    Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints

    Affected: from 3.2.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-49267Medium 5.9

    Apache Airflow: No certificate validation on SMTP STARTTLS connections

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-41017Medium 5.9

    Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutation

    Affected: from 3.2.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-42252Critical 9.1

    Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-42360Medium 6.5

    Apache Airflow: Rendered template truncation bypasses nested sensitive-key masking

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-42358Medium 6.5

    Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secrets

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator

    Affected: from 3.2.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Arbitrary import in custom deadline-reference deserialization

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-46764Medium 4.3

    Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filter

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-48726Medium 6.5

    Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments

    Affected: from 3.0.0, fixed in 3.2.2; fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-45192Medium 6.5

    Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API Response

    Affected: from 3.0.0, fixed in 3.2.2.

    Fixed in 3.2.2 (released May 29, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-38743Medium 4.3

    Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities

    Affected: from 3.0.0, fixed in 3.2.1.

    Fixed in 3.2.1 (released Apr 22, 2026, 2 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-40690Medium 4.3

    Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users

    Affected: from 3.0.0, fixed in 3.2.1.

    Fixed in 3.2.1 (released Apr 22, 2026, 2 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1

    Affected: from 3.0.0, fixed in 3.2.0; from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 11 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf

    Affected: from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 11 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Exposing stack trace in case of constraint error

    Affected: from 3.0.0, fixed in 3.2.0; fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 11 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)

    Affected: from 3.0.0, fixed in 3.2.0; fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 11 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access to

    Affected: from 3.0.0, fixed in 3.2.0; from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 11 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: JWT token appearing in logs

    Affected: from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 9 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-25219Medium 6.5

    Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

    Affected: from 3.0.0, fixed in 3.1.8.

    Fixed in 3.1.8 (released Mar 11, 2026, 35 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: RCE by race condition in example_xcom dag

    Affected: from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 8 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (type/var) Bypass in XCom API

    Affected: from 3.1.8, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 6 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI

    Affected: from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 6 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2025-57735Critical 9.1

    Apache Airflow: Airflow Logout Not Invalidating JWT

    Affected: from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 2 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-34538Medium 6.5

    Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)

    Affected: from 3.0.0, fixed in 3.2.0.

    Fixed in 3.2.0 (released Apr 7, 2026, 2 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-28563Medium 4.3

    Apache Airflow: DAG authorization bypass

    Affected: from 3.0.0, fixed in 3.1.8.

    Fixed in 3.1.8 (released Mar 11, 2026, 6 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-26929Medium 6.5

    Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata

    Affected: from 3.0.0, fixed in 3.1.8.

    Fixed in 3.1.8 (released Mar 11, 2026, 6 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

    Affected: from 3.1.0, fixed in 3.1.8.

    Fixed in 3.1.8 (released Mar 11, 2026, 6 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

    Affected: from 3.0.0, fixed in 3.1.8.

    Fixed in 3.1.8 (released Mar 11, 2026, 6 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2025-65995Medium 6.5

    Apache Airflow: Disclosure of secrets to UI via kwargs

    Affected: from 3.0.0, fixed in 3.1.4.

    Fixed in 3.1.4 (released Dec 10, 2025, 73 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-22922Medium 6.5

    Apache Airflow: Airflow externalLogUrl Permission Bypass

    Affected: from 3.1.0, fixed in 3.1.7.

    Fixed in 3.1.7 (released Feb 4, 2026, 5 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2026-24098Medium 6.5

    Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors

    Affected: from 3.0.0, fixed in 3.1.7.

    Fixed in 3.1.7 (released Feb 4, 2026, 5 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: proxy credentials for various providers might leak in task logs

    Affected: from 3.0.0, fixed in 3.1.6.

    Fixed in 3.1.6 (released Jan 13, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated

    Affected: from 3.1.0, fixed in 3.1.6.

    Fixed in 3.1.6 (released Jan 13, 2026, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2025-66388Medium 4.3

    Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI

    Affected: from 3.1.0, fixed in 3.1.4.

    Fixed in 3.1.4 (released Dec 10, 2025, 5 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2025-54941Medium 4.6

    Apache Airflow: Command injection in "example_dag_decorator"

    Affected: from 3.0.0, fixed in 3.0.5.

    Fixed in 3.0.5 (released Aug 20, 2025, 71 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2025-62402Medium 5.4

    Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API

    Affected: from 3.0.0, fixed in 3.1.1.

    Fixed in 3.1.1 (released Oct 27, 2025, 3 days before disclosure).

    The latest release, 3.4.0, is not affected.

  • CVE-2025-54831Medium 6.5

    Apache Airflow: Connection sensitive details exposed to users with READ permissions

    Affected: versions 3.0.3.

    Fixed in 3.0.4 (released Aug 8, 2025, 49 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 3.4.0, is not affected.