Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-46421 EUVD-2022-7732GHSA-rc58-qr9j-cpgwPYSEC-2026-274

Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params

Published Dec 20, 2022 · Updated Apr 16, 2025 · Assigned by apache

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow Hive Provider < 5.0.0 5.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow-providers-apache-hive < 5.0.0 5.0.0 GHSA-rc58-qr9j-cpgw

References