Apache Software Foundation Apache Airflow

• CVE-2026-33858 High 8.8 Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API 0.6%
• CVE-2025-66236 High 7.5 Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI 0.4%
• CVE-2025-57735 Critical 9.1 Apache Airflow: Airflow Logout Not Invalidating JWT 0.7%
• CVE-2026-34538 Medium 6.5 Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure) 0.7%
• CVE-2026-28563 Medium 4.3 Apache Airflow: DAG authorization bypass 0.5%
• CVE-2026-26929 Medium 6.5 Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata 0.4%
• CVE-2026-30911 High 8.1 Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization 0.6%
• CVE-2026-28779 High 7.5 Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications 0.7%
• CVE-2025-27555 Medium 6.5 Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli 0.4%
• CVE-2024-56373 High 8.4 Apache Airflow: SSTI to Code Execution in Airflow through Shared DB Information 1.2%
• CVE-2025-65995 Medium 6.5 Apache Airflow: Disclosure of secrets to UI via kwargs 0.9%
• CVE-2026-22922 Medium 6.5 Apache Airflow: Airflow externalLogUrl Permission Bypass 0.4%
• CVE-2026-24098 Medium 6.5 Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors 0.8%
• CVE-2025-68675 High 7.5 Apache Airflow: proxy credentials for various providers might leak in task logs 1.9%
• CVE-2025-68438 High 7.5 Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated 0.6%
• CVE-2025-66388 Medium 4.3 Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI 0.5%
• CVE-2025-54941 Medium 4.6 Apache Airflow: Command injection in "example_dag_decorator" 0.5%
• CVE-2025-62402 Medium 5.4 Apache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API 0.5%
• CVE-2025-62503 Medium 4.6 Apache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables) 0.4%
• CVE-2025-54831 Medium 6.5 Apache Airflow: Connection sensitive details exposed to users with READ permissions 1.0%
• CVE-2024-45784 High 7.5 Apache Airflow: Sensitive configuration values are not masked in the logs by default 1.3%
• CVE-2024-50378 Medium 4.9 Apache Airflow: Secrets not masked in UI when sensitive variables are set via Airflow cli 1.2%
• CVE-2024-45034 High 8.8 Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes 1.7%
• CVE-2024-45498 High 8.8 Apache Airflow: Command Injection in an example DAG 1.2%
• CVE-2024-41937 Medium 6.1 Apache Airflow: Stored XSS Vulnerability on provider link 1.7%
• CVE-2024-39877 High 8.8 Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler 1.7%
• CVE-2024-39863 High 8.1 Apache Airflow: Potential XSS Vulnerability 1.0%
• CVE-2024-25142 Medium 5.5 Apache Airflow: Cache Control - Storage of Sensitive Data in Browser Cache 0.3%
• CVE-2024-32077 Medium 5.4 Apache Airflow: XSS vulnerability in Task Instance Log/Log Details 1.6%
• CVE-2024-31869 Medium 5.3 Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used 1.1%
• CVE-2024-29735 Medium 5.3 Apache Airflow: Potentially harmful permission changing by log task handler 1.5%
• CVE-2024-28746 High 8.1 Apache Airflow: Ignored Airflow Permissions 1.3%
• CVE-2024-26280 Medium 4.7 Apache Airflow: Overly broad default permissions for Viewer/Ops (audit logs) 1.9%
• CVE-2024-27906 Medium 5.9 Apache Airflow: Dag Code and Import Error Permissions Ignored 0.3%
• CVE-2023-50944 Medium 6.5 Apache Airflow: Bypass permission verification to read code of other dags 1.0%
• CVE-2023-50943 High 7.5 Apache Airflow: Potential pickle deserialization vulnerability in XComs 1.2%
• CVE-2023-51702 Medium 6.5 Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service 0.4%
• CVE-2023-48291 Unrated Apache Airflow: Improper access control to DAG resources 1.8%
• CVE-2023-50783 Unrated Apache Airflow: Improper access control vulnerability on the "varimport" endpoint 1.4%
• CVE-2023-47265 Unrated Apache Airflow: DAG Params alllow to embed unchecked Javascript 1.3%
• CVE-2023-49920 Unrated Apache Airflow: Missing CSRF protection on DAG/trigger 1.0%
• CVE-2023-42781 Unrated Apache Airflow: Permission verification bypass allows viewing dagruns of other dags 1.7%
• CVE-2023-47037 Unrated Apache Airflow missing fix for CVE-2023-40611 in 2.7.1 (DAG run broken access) 1.5%
• CVE-2023-46215 High 7.5 Apache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend 1.6%
• CVE-2023-46288 Unrated Apache Airflow: Sensitive parameters exposed in API when "non-sensitive-only" configuration is set 1.8%
• CVE-2023-42663 Unrated Apache Airflow: Bypass permission verification to view task instances of other dags 2.0%
• CVE-2023-42792 Unrated Apache Airflow: Improper access control to DAG resources 1.9%
• CVE-2023-45348 Unrated Apache Airflow: Configuration information leakage vulnerability 1.6%
• CVE-2023-42780 Unrated Apache Airflow: Improper access control vulnerability in the "List dag warnings" feature 1.4%
• CVE-2023-40712 Unrated Apache Airflow: Secrets can be unmasked in the "Rendered Template" 2.0%