Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-49296 | medium | 6.5 | No | Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `... | 2026-11-03 |
| CVE-2026-48892 | medium | 6.5 | No | The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SE... | 2026-11-03 |
| CVE-2026-49267 | medium | 5.9 | No | Apache Airflow's EmailOperator and the underlying `airflow.utils.email` helpers established SMTP STARTTLS connections without verifying the... | 2026-11-03 |
| CVE-2026-48891 | medium | 4.3 | No | A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized... | 2026-11-03 |
| CVE-2026-48828 | medium | 6.5 | No | The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key... | 2026-11-03 |
| CVE-2026-48726 | medium | 6.5 | No | A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the... | 2026-11-03 |
| CVE-2026-46764 | medium | 4.3 | No | The Event Log detail endpoint `GET /api/v2/eventLogs/{event_log_id}` in Apache Airflow fetched audit-log rows directly by numeric ID after o... | 2026-11-03 |
| CVE-2026-45426 | low | 3.1 | No | Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag.... | 2026-11-03 |
| CVE-2026-45360 | high | 7.3 | No | Apache Airflow's scheduler-side deadline-reference decoder (`SerializedCustomReference.deserialize_reference`) imported and dispatched arbit... | 2026-11-03 |
| CVE-2026-45192 | medium | 6.5 | No | A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connect... | 2026-11-03 |
| CVE-2026-42360 | medium | 6.5 | No | A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g. nested `password` / `token` / `secret`... | 2026-11-03 |
| CVE-2026-42359 | high | 8.8 | No | A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permiss... | 2026-11-03 |
| CVE-2026-42358 | medium | 6.5 | No | A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like `password`, `tok... | 2026-11-03 |
| CVE-2026-42252 | critical | 9.1 | No | Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashO... | 2026-11-03 |
| CVE-2026-41084 | high | 7.5 | No | A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated author... | 2026-11-03 |
| CVE-2026-41017 | medium | 5.9 | No | Apache Airflow's `JWTRefreshMiddleware` set the JWT auth cookie without the `Secure` flag, so deployments running the Airflow API server beh... | 2026-11-03 |
| CVE-2026-41014 | medium | 4.3 | No | The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated U... | 2026-11-03 |
| CVE-2026-40963 | low | 3.1 | No | The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller h... | 2026-11-03 |
| CVE-2026-40961 | high | 7.2 | No | A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the `is_safe_url` check, enablin... | 2026-11-03 |
| CVE-2026-40861 | medium | 6.5 | No | A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server pro... | 2026-11-03 |