Aller au contenu
Se connecter
Non notée

CVE-2026-27173 JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to…

Description

JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only access to perform actions that were only available to running tasks via Task SDK and potentially allow to modify state of Airflow Database for tasks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Airflow CNCF Kubernetes Provider 10.17 premières → < 10.17.0 10.17.0

Autres CVE de Apache Airflow CNCF Kubernetes Provider

Les 3 CVE de Apache Airflow CNCF Kubernetes Provider →
CVE-2023-51702 Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the… Non notée CVE-2023-33234 Arbitrary code execution in Apache Airflow CNCF Kubernetes provider version 5.0.0 allows user to change xcom sidecar… Non notée
Suivre cette CVE