Skip to content

Product

Apache Airflow vulnerabilities

34 published CVES affecting Apache Airflow, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
34
Critical
5
High
18
Medium
11
Low
0
Unscored
0
CISA KEV
0

Latest Apache Airflow CVEs

Newest publication first · page 1 of 2

  4. CVE-2023-40611 Apache Airflow Dag Runs Broken Access Control Vulnerability

    Published
    MediumCVSS 4.3

    Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc. Users sh...

  5. CVE-2023-39441 Apache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate Validation

    Published
    MediumCVSS 5.9 EPSS 0.80%

    Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate vulnerability. The default SSL context with SSL library did not check a server's X.509 certificate. Instead,...

  7. CVE-2023-40273 Session fixation in Apache Airflow web interface

    Published
    HighCVSS 8.0

    The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the session of the user. Other than manually cleaning the session database (for datab...

  9. CVE-2023-22888 Apache Airflow: Scheduler remote DoS

    Published
    HighCVSS 7.1 EPSS 1.4%

    Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgra...

  10. CVE-2023-36543 Apache Airflow: ReDoS via dags function

    Published
    HighCVSS 7.1 EPSS 1.6%

    Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected

  11. CVE-2022-46651 Apache Airflow: Security vulnerability on AirFlow Connections

    Published
    HighCVSS 7.1

    Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically...

  12. CVE-2023-22887 Apache Airflow path traversal by authenticated user

    Published
    HighCVSS 7.1

    Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated...

  14. CVE-2023-35005 Apache Airflow: Information disclosure on configuration view

    Published
    HighCVSS 7.1

    In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations. This vulnerability is mitigated by the fact configuration is not shown in the UI by default (only if [webserver] expose_config is set to non-sensitive-only), and not all uncen...

  19. CVE-2022-40189 Apache Airlfow Pig Provider RCE

    Published
    CriticalCVSS 9.8

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue aff...

  21. CVE-2022-38649 Apache Airflow Pinot provider allowed Command Injection

    Published
    CriticalCVSS 9.8

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue a...

  25. CVE-2022-40127 Apache Airflow <2.4.0 has an RCE in a bash example

    Published
    HighCVSS 8.8

    A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.