Summary
Ein Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um Informationen offenzulegen, falsche Informationen darzustellen oder Sicherheitsmaßnahmen zu umgehen.
Product
Apache Airflow ist eine Plattform zur programmatischen Erstellung, Planung und Überwachung von Workflows.
Vulnerabilities 3
-
Critical 9.1
Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry
Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, the endpoint returns its normal logout response but revokes n…
-
Medium 4.3
Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter
Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events …
-
Medium 4.2
Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation
When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the cookie and ignores the bearer token, inverting the intended precedence of bearer over cookie. The request …
Revision history
-
#1
Initiale Fassung
References
-
GitHub Security Advisory GHSA-pfr9-65p3-w9r9 vom 2026-09-21
https://github.com/advisories/GHSA-pfr9-65p3-w9r9
-
GitHub Security Advisory GHSA-9x6g-jfj6-r3jg vom 2026-09-21
https://github.com/advisories/GHSA-9x6g-jfj6-r3jg
-
GitHub Security Advisory GHSA-9CMM-29P3-73GR vom 2026-09-21
https://github.com/advisories/GHSA-9CMM-29P3-73GR