Medium WID-SEC-2026-1153 1 CVE

Apache Airflow: Schwachstelle ermöglicht Offenlegung von Informationen

Published Apr 15, 2026 · Updated Apr 15, 2026 · de-DE

Vendor: Apache Product: Airflow Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Airflow ausnutzen, um Informationen offenzulegen.

Product

Apache Airflow ist eine Plattform zur programmatischen Erstellung, Planung und Überwachung von Workflows.

Vulnerabilities 1

Medium 6.5

CVE-2026-25219

Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

The `access_key` and `connection_string` connection properties were not marked as sensitive names in secrets masker. This means that user with read permission could see the values in Connection UI, as well as when Connection was accidentaly logged to logs, th…

Apache Software Foundation Apache Airflow apache-airflow PyPI

Apr 15, 2026

Revision history

2026-04-15 #1
Initiale Fassung

References

OSS Security Mailing List vom 2026-04-15
https://seclists.org/oss-sec/2026/q2/136
CVERecord vom 2026-04-15
https://www.cve.org/CVERecord?id=CVE-2026-25219