| CVE-2026-86473 |
Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie
|
Not rated
|
Sep 21, 2026 |
| CVE-2026-75158 |
Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter…
|
Not rated
|
Sep 21, 2026 |
| CVE-2026-82355 |
When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token,…
|
Not rated
|
Sep 21, 2026 |
| CVE-2026-75157 |
Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with `READ` instead of…
|
Not rated
|
Sep 18, 2026 |
| CVE-2026-59244 |
Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-58076 |
Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-59242 |
Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-54183 |
Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-67260 |
Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-67587 |
Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-65017 |
Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-68968 |
Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id`…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-68969 |
Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-68970 |
Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-68971 |
Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-68076 |
Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong…
|
Not rated
|
Aug 12, 2026 |
| CVE-2026-33264 |
A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths…
|
Not rated
|
Jul 7, 2026 |
| CVE-2026-49487 |
In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's…
|
Not rated
|
Jul 7, 2026 |
| CVE-2026-48828 |
The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based…
|
Not rated
|
Jul 7, 2026 |
| CVE-2026-49296 |
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the…
|
Not rated
|
Jul 7, 2026 |
| CVE-2026-48891 |
A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the…
|
Not rated
|
Jul 7, 2026 |
| CVE-2026-48892 |
The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like…
|
Not rated
|
Jul 7, 2026 |
| CVE-2026-40861 |
A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable…
|
Not rated
|
Jun 1, 2026 |
| CVE-2026-40961 |
A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the…
|
Not rated
|
Jun 1, 2026 |
| CVE-2026-40963 |
The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without…
|
Not rated
|
Jun 1, 2026 |