Apache Airflow Archives • Daily CyberSecurity

Critical Apache Airflow Vulnerability Exposes Workflow Schedulers to Code Execution Apache Airflow vulnerability Airflow scheduler flaw

Critical Apache Airflow Vulnerability Exposes Workflow Schedulers to Code Execution

Do Son June 4, 2026

Security researchers recently uncovered a serious Apache Airflow vulnerability affecting data orchestration pipelines. This software defect introduces...

Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831

Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831

Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering

Do Son December 13, 2025

The maintainers of Apache Airflow, the industry-standard platform for programmatic workflow authoring, have released a crucial security...

CVE-2025-54831: Apache Airflow Bug Exposes Sensitive Connection Passwords to Read-Only Users Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831

CVE-2025-54831: Apache Airflow Bug Exposes Sensitive Connection Passwords to Read-Only Users

Do Son September 26, 2025

The Apache Software Foundation has released a fix for Apache Airflow, a popular open-source platform for authoring,...

Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration Azure Data Factory Apache Airflow - Dirty DAG vulnerabilities

Azure Data Factory Apache Airflow - Dirty DAG vulnerabilities

Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration

Do Son December 18, 2024

Unit 42 researchers have uncovered multiple vulnerabilities in Azure Data Factory’s managed Apache Airflow integration, potentially enabling...

CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831

CVE-2024-45784: Apache Airflow Vulnerability Exposes Sensitive Data in Logs

Do Son November 16, 2024

A vulnerability in the popular workflow management platform Apache Airflow could inadvertently expose sensitive configuration data, potentially...

CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability Airflow Credential Leak, UI Redaction Failure CVE-2024-39877 & CVE-2024-45784 Airflow Connection Leak, CVE-2025-54831

CVE-2024-39877: Apache Airflow Security Update Addresses Code Execution Vulnerability

Do Son July 16, 2024

Apache Airflow, the popular open-source workflow management platform, has released a security update to address a potentially...

Apache Airflow patches multiple vulnerabilities affecting its packages Apache Airflow vulnerability

Apache Airflow patches multiple vulnerabilities affecting its packages

Do Son February 23, 2023

Apache Airflow has published a security advisory to warn users about multiple security bugs affecting many of...

CVE-2022-38054: Apache Airflow session hijacking vulnerability

Do Son September 2, 2022

The Apache Software Foundation on Friday addressed two [1,2] vulnerabilities in Apache Airflow that a remote attacker...