Skip to content
OpenAdvisories
High WID-SEC-2026-3630 4 CVEs

Apache Airflow Providers: Mehrere Schwachstellen

Published Sep 28, 2026 · Updated Sep 29, 2026 · Revision 2 · de-DE

Vendor: Apache Product: Airflow Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in verschiedenen Apache Airflow Providern ausnutzen, um Dateien zu manipulieren, um einen SQL-Injection Angriff durchzuführen, um Informationen offenzulegen und um Sicherheitsvorkehrungen zu umgehen.

Product

Apache Airflow ist eine Plattform zur programmatischen Erstellung, Planung und Überwachung von Workflows.

Vulnerabilities 4

  • Medium 6.5
    CVE-2026-81862

    Apache Airflow Teradata provider: Teradata transfer operators embed cloud storage credentials in SQL text, task logs and Teradata query logs

    Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTeradataOperator` and `AzureBlobStorageToTeradataOperator` interpolate the source bucket's credentials as plain string literals into the `CREATE MULTISET …

    Apache Software Foundation Apache Airflow Teradata provider
  • Medium 6.3
    CVE-2026-81930

    Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain

    Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API endpoint is built as `https://{account}.snowflakecomputing.com/api/v2/statements`, so an `account` val…

    Apache Software Foundation Apache Airflow Snowflake provider apache-airflow-providers-snowflake PyPI
  • Medium 6.3
    CVE-2026-86843

    Apache Airflow Teradata provider: SQL injection via unvalidated Dag Params in the compute-cluster example Dag

    The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is …

    Apache Software Foundation Apache Airflow Teradata provider
  • Medium 4.3
    CVE-2026-81914

    Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names

    Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted string literals, without escaping the quote character that delimits them. A name containing an apostrophe therefore termi…

    Apache Software Foundation Apache Airflow Google provider apache-airflow-providers-google PyPI

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-88697, EUVD-2026-88696, EUVD-2026-88694, EUVD-2026-88695

  2. #1

    Initiale Fassung

References