Skip to content
OpenAdvisories
Medium WID-SEC-2026-1123 1 CVE

Apache Airflow: Schwachstelle ermöglicht Codeausführung

Published Apr 14, 2026 · Updated Apr 14, 2026 · de-DE

Vendor: Apache Product: Airflow

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Airflow ausnutzen, um beliebigen Programmcode auszuführen.

Product

Apache Airflow ist eine Plattform zur programmatischen Erstellung, Planung und Überwachung von Workflows.

Vulnerabilities 1

  • High 8.1
    CVE-2025-54550

    Apache Airflow: RCE by race condition in example_xcom dag

    The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitrary execution of code on the worker. …

    Apache Software Foundation Apache Airflow apache-airflow PyPI

Revision history

  1. #1

    Initiale Fassung

References