Mittel

A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `de

Veröffentlicht: 07.07.2026
Aktualisiert: 11.10.2026 15:18

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with read permission on some Dags could enumerate the identifiers of other Dags they were not authorized to read by inspecting the dependency graph for trigger / sensor references. Affects deployments that rely on per-Dag read scoping to keep Dag identifiers private across teams. This is a residual gap in the fix for CVE-2026-28563, which filtered the top-level Dag key but did not propagate the filter into the trigger / sensor dep-source / dep-target fields. Users who already upgraded for CVE-2026-28563 should additionally upgrade to apache-airflow 3.3.0 or later to cover the residual trigger / sensor dependency leak.

Betroffene Software

Klicken Sie auf eine Technologie, um alle zugehörigen Schwachstellen anzuzeigen.

Plattform	Paket	Anfällige Versionen	Behoben in
Python (PyPI)	apache-airflow	< 3.3.0	3.3.0

Verweise

CVSS-Wert 4.3/10

CVSS-Vektor: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Schwäche (CWE): CWE-200
Plattform: Python (PyPI)
Paket: apache-airflow
Veröffentlicht: 07.07.2026
Aktualisiert: 11.10.2026 15:18

Quellen und Lizenzen

OSV / GitHub Advisory Database - GHSA-3322-mjxh-9mp5 - CC BY 4.0

OSV / GitHub Advisory Database - PYSEC-2026-2086 - PyPA Advisory Database; CC BY 4.0

Schwachstellenhistorie: apache-airflow

Alle veröffentlichten Schwachstellen dieses Pakets (Python (PyPI)), neueste zuerst. Zeigt, ob es ein einmaliger Ausrutscher ist oder ein Paket, das man im Auge behalten muss.

Alle (158) im Archiv

Einträge insgesamt: 158
Erste → letzte: 08.2018 09.2026
Ohne Fix: 4
In Angriffen ausgenutzt: 2

Verteilung nach Schweregrad

Kritisch 16
Hoch 49
Mittel 86
Niedrig 7

Veröffentlichungen pro Jahr

2018: 1
2019: 8
2020: 12
2021: 5
2022: 16
2023: 31
2024: 18
2025: 6
2026: 61

21.09.2026

Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, th

Kritisch · 9.1 CVE-2026-86473 >= 3.0.0, < 3.3.2 3.3.2
12.08.2026

Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse. The authorization dependency parsed it with `int()`

Hoch · 7.5 CVE-2026-68968 < 3.3.1 3.3.1
12.08.2026

Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because `SyncCallback` is itself a

Hoch · 8.8 CVE-2026-67587 >= 3.3.0, < 3.3.1 3.3.1
12.08.2026

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweep deserializes the task instance's `next_kwargs` without an

Hoch · 7.3 CVE-2026-67260 >= 3.3.0, < 3.3.1 3.3.1
12.08.2026

Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and instantiating it with arguments from the same blob, w

Hoch · 8.8 CVE-2026-58076 >= 3.3.0, < 3.3.1 3.3.1
07.07.2026

A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `de dieser Eintrag

Mittel · 4.3 CVE-2026-48891 < 3.3.0 3.3.0
07.07.2026

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a

Kritisch · 9.8 CVE-2026-33264 < 3.3.0 3.3.0
01.06.2026

A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (e

Hoch · 8.8 CVE-2026-42359 >= 3.2.0, < 3.2.2 3.2.2
01.06.2026

A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against the `dag_id` resolved from the URL path whil

Hoch · 7.5 CVE-2026-41084 >= 3.2.0, < 3.2.2 3.2.2
01.06.2026

Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashOperator(bash_command="echo value: {{ dag_run.conf['conf1'] }

Kritisch · 9.1 CVE-2026-42252 >= 3.0.0, < 3.2.2 3.2.2
01.06.2026

Apache Airflow: Authenticated users can bypass the `is_safe_url` check

Hoch · 7.2 CVE-2026-40961 < 3.2.2 3.2.2
01.06.2026

Apache Airflow Vulnerable to Deserialization of Untrusted Data

Hoch · 7.3 CVE-2026-45360 >= 3.2.0, < 3.2.2 3.2.2
18.04.2026

Apache Airflow allows code execution through crafted XCom payloads

Hoch · 7.2 CVE-2026-25917 < 3.2.0 3.2.0
16.04.2026

Apache Airflow: JWT token appearing in logs

Hoch · 7.5 CVE-2026-31987 >= 3.0.0, < 3.2.0 3.2.0
16.04.2026

Apache Airflow: RCE by race condition in example_xcom dag

Hoch · 8.1 CVE-2025-54550 < 3.2.0 3.2.0
13.04.2026

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly tru

Hoch · 8.8 CVE-2026-33858 >= 3.1.8, < 3.2.0 3.2.0
09.04.2026

Apache Airflow: JWT token still valid after logout

Kritisch · 9.1 CVE-2025-57735 >= 3.0.0, < 3.2.0 3.2.0
17.03.2026

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve,

Hoch · 8.1 CVE-2026-30911 >= 3.1.0, < 3.1.8 3.1.8
17.03.2026

Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.

Hoch · 7.5 CVE-2026-28779 >= 3.0.0, < 3.1.8 3.1.8
24.02.2026

Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table

Hoch · 8.4 CVE-2024-56373 < 2.11.1 2.11.1

Mehr anzeigen (20) 20 von 66 angezeigt

Erkennen Sie Schwachstellen in Ihrer Anwendung

Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.

Anwendung verbinden