Medium WID-SEC-2026-1158 1 CVE

Apache Airflow: Schwachstelle ermöglicht Offenlegung von Informationen

Published Apr 16, 2026 · Updated Apr 16, 2026 · de-DE

Vendor: Apache Product: Airflow

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Airflow ausnutzen, um Informationen offenzulegen.

Product

Apache Airflow ist eine Plattform zur programmatischen Erstellung, Planung und Überwachung von Workflows.

Vulnerabilities 1

High 7.5

CVE-2026-31987

Apache Airflow: JWT token appearing in logs

JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Users are advised to upgrade to Airflow version that contains fix. Users are recommended to upgrade to version 3.2.0, which fixes this issue.

Apache Software Foundation Apache Airflow apache-airflow PyPI

Apr 16, 2026

Revision history

2026-04-16 #1
Initiale Fassung

References

GitHub Security Advisory GHSA-phv5-vq5p-qhp7 vom 2026-04-16
https://github.com/advisories/GHSA-phv5-vq5p-qhp7
Airflow GitHub Issue #62773 vom 2026-04-16
https://github.com/apache/airflow/issues/62773
Airflow GitHub Issue #62428 vom 2026-04-16
https://github.com/apache/airflow/issues/62428