Skip to content
OpenAdvisories
Medium WID-SEC-2026-2223 6 CVEs

Apache Airflow: Mehrere Schwachstellen

Published Jul 6, 2026 · Updated Jul 7, 2026 · Revision 2 · de-DE

Vendor: Apache Product: Airflow Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsvorkehrungen zu umgehen, und um Informationen offenzulegen.

Product

Apache Airflow ist eine Plattform zur programmatischen Erstellung, Planung und Überwachung von Workflows.

Vulnerabilities 6

  • Critical 9.8
    CVE-2026-33264

    Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()

    A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain remote code execution…

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 6.5
    CVE-2026-48828

    Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key

    The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `*_password` / `*_token` / `*_secret`) could not fire for JSO…

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 6.5
    CVE-2026-48892

    Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options

    The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and `AIRFLOW__WORKERS__SECRETS_BACKEND_KWARG__SECRET_ID`) as synthetic config options whose option names were …

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 6.5
    CVE-2026-49296

    Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

    Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET /api/v2/dagSources/{dag_id}` — and the equivalent Dag-source view in the UI — returned the entire source file witho…

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 6.5
    CVE-2026-49487

    Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs

    In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking. When a deferred operator passed a secret (for example a provider API key) into its trigger, any authenticated user …

    Apache Software Foundation Apache Airflow apache-airflow PyPI
  • Medium 4.3
    CVE-2026-48891

    Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target

    A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep.source` and `dep.target` fields of trigger / sensor depen…

    Apache Software Foundation Apache Airflow apache-airflow PyPI

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-42024, EUVD-2026-42030, EUVD-2026-42029, EUVD-2026-42027, EUVD-2026-42028, EUVD-2026-42025, GHSA-4FH7-7JX4-8F6C

  2. #1

    Initiale Fassung

References