Apache Airflow

Critical Apache Airflow Vulnerability Exposes Workflow Schedulers to Code Execution

• Vulnerability Report

Critical Apache Airflow Vulnerability Exposes Workflow Schedulers to Code Execution

Do Son June 4, 2026 0

Security researchers recently uncovered a serious Apache Airflow vulnerability affecting data orchestration pipelines. This software defect introduces...

Read More Read more about Critical Apache Airflow Vulnerability Exposes Workflow Schedulers to Code Execution

Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering

• Vulnerability Report

Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering

Do Son December 13, 2025 0

The maintainers of Apache Airflow, the industry-standard platform for programmatic workflow authoring, have released a crucial security...

Read More Read more about Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering

CVE-2025-54831: Apache Airflow Bug Exposes Sensitive Connection Passwords to Read-Only Users

• Vulnerability Report

CVE-2025-54831: Apache Airflow Bug Exposes Sensitive Connection Passwords to Read-Only Users

Do Son September 26, 2025 0

The Apache Software Foundation has released a fix for Apache Airflow, a popular open-source platform for authoring,...

Read More Read more about CVE-2025-54831: Apache Airflow Bug Exposes Sensitive Connection Passwords to Read-Only Users

Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration

• Vulnerability

Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration

Do Son December 18, 2024 0

Unit 42 researchers have uncovered multiple vulnerabilities in Azure Data Factory’s managed Apache Airflow integration, potentially enabling...

Read More Read more about Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration

CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs

• Vulnerability

CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs

Do Son November 16, 2024 0

A vulnerability in the popular workflow management platform Apache Airflow could inadvertently expose sensitive configuration data, potentially...

Read More Read more about CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs

CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability

• Vulnerability

CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability

Do Son July 16, 2024 0

Apache Airflow, the popular open-source workflow management platform, has released a security update to address a potentially...

Read More Read more about CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability

Apache Airflow patches multiple vulnerabilities affecting its packages

• Vulnerability

Apache Airflow patches multiple vulnerabilities affecting its packages

Do Son February 23, 2023 0

Apache Airflow has published a security advisory to warn users about multiple security bugs affecting many of...

Read More Read more about Apache Airflow patches multiple vulnerabilities affecting its packages

CVE-2022-38054: Apache Airflow session hijacking vulnerability

• Vulnerability

CVE-2022-38054: Apache Airflow session hijacking vulnerability

Do Son September 2, 2022

The Apache Software Foundation on Friday addressed two [1,2] vulnerabilities in Apache Airflow that a remote attacker...

Read More Read more about CVE-2022-38054: Apache Airflow session hijacking vulnerability