Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25754 BIT-airflow-2023-25754EUVD-2023-0029GHSA-jchm-fm4q-c2fpPYSEC-2023-59

Apache Airflow: Privilege escalation using airflow logs

Published May 8, 2023 · Updated Feb 13, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Airflow Package: apache-airflow Ecosystem: PyPI

Description

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow < 2.6.0 2.6.0

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow < 2.6.0b1 2.6.0b1 GHSA-jchm-fm4q-c2fp
PyPI apache-airflow < 2.6.0 2.6.0 PYSEC-2023-59

References