| CVE-2026-33858 |
Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing…
|
Not rated
|
Apr 13, 2026 |
| CVE-2025-66236 |
Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take…
|
Not rated
|
Apr 13, 2026 |
| CVE-2025-57735 |
When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of…
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-34538 |
Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only…
|
Not rated
|
Apr 9, 2026 |
| CVE-2026-28563 |
Apache Airflow versions 3.1.0 through 3.1.7 /ui/dependencies endpoint returns the full DAG dependency graph without…
|
Not rated
|
Mar 17, 2026 |
| CVE-2026-26929 |
Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization…
|
Not rated
|
Mar 17, 2026 |
| CVE-2026-30911 |
Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop…
|
Not rated
|
Mar 17, 2026 |
| CVE-2026-28779 |
Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the…
|
Not rated
|
Mar 17, 2026 |
| CVE-2025-27555 |
Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see…
|
Not rated
|
Feb 24, 2026 |
| CVE-2024-56373 |
DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute…
|
Not rated
|
Feb 24, 2026 |
| CVE-2025-65995 |
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the…
|
Not rated
|
Feb 21, 2026 |
| CVE-2026-22922 |
Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with…
|
Not rated
|
Feb 9, 2026 |
| CVE-2026-24098 |
Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or…
|
Not rated
|
Feb 9, 2026 |
| CVE-2025-68675 |
In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy…
|
Not rated
|
Jan 16, 2026 |
| CVE-2025-68438 |
In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed…
|
Not rated
|
Jan 16, 2026 |
| CVE-2025-66388 |
A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to…
|
Not rated
|
Dec 15, 2025 |
| CVE-2025-54941 |
An example dag `example_dag_decorator` had non-validated parameter that allowed the UI user to redirect the example to a…
|
Not rated
|
Oct 30, 2025 |
| CVE-2025-62402 |
API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server…
|
Not rated
|
Oct 30, 2025 |
| CVE-2025-62503 |
User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create…
|
Not rated
|
Oct 30, 2025 |
| CVE-2025-54831 |
Apache Airflow 3 introduced a change to the handling of sensitive information in Connections
|
Not rated
|
Sep 26, 2025 |
| CVE-2024-45784 |
Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in…
|
Not rated
|
Nov 15, 2024 |
| CVE-2024-50378 |
Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see…
|
Not rated
|
Nov 8, 2024 |
| CVE-2024-45034 |
Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG…
|
Not rated
|
Sep 7, 2024 |
| CVE-2024-45498 |
Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows…
|
Not rated
|
Sep 7, 2024 |
| CVE-2024-41937 |
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to…
|
Not rated
|
Aug 21, 2024 |