Apache Airflow
- Software type
- Orchestration platform
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/13/2026, Apache Airflow recorded 21 security vulnerabilities in the last 90 days, of which 3 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Apache Airflow and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-96285Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructorsCVE-2026-86829Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluationCVE-2026-86468Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logsCVE-2026-82337Apache Airflow: DeadlineAlert fields bypass plugin-registration gate for scheduler-side deserializationCVE-2026-68982Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-96285Apache Airflow: Scheduler: next_kwargs deserialized before the dict check, so resume data still invokes constructors | Exploitation statusNot confirmed | FixYes |
| SeverityUnknown |
CVE-2026-86829Apache Airflow: Deserialization of task-controlled XCom values in the Scheduler during dependency evaluation | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-86468Apache Airflow: CLI argv masking misses Variable values and --conn-extra, persisting secrets in audit logs | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-82337Apache Airflow: DeadlineAlert fields bypass plugin-registration gate for scheduler-side deserialization | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-68982Apache Airflow: CeleryExecutor: forged callback workloads run on Celery workers without workload-token validation | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-50204Apache Airflow: Audit-log secrets masker redacts by key name only, persisting connection and Variable secrets in cleartext | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-40913Apache Airflow: Import Errors API Leaks Unauthorized DAG Stack Traces via Incomplete Per-File RBAC Enforcement | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-113508Apache Airflow: Logout token revocation fails open; errors silently swallowed | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-113504Apache Airflow: Secrets masker: pattern-based masking bounded at depth 5 returns deeply-nested registered secrets in cleartext | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-111455Apache Airflow: Connections API: async connection test authorizes create at enqueue but overwrites a later-created connection at commit | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-111454Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-111453Apache Airflow: API: asset queuedEvents DELETE checks Dag edit on a ?dag_id query value but deletes rows for every readable Dag | Exploitation statusNot exploited | FixYes | Published11/09/2026 | SeverityMedium |
|---|
CVE-2026-111452Apache Airflow: Secrets masker: camelCase key names (privateKey, connectionString, webhookUrl) not matched against the sensitive-field list | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-111421Apache Airflow: Execution API: set_xcom skips the reserved-key check, so task-written XComs instantiate airflow.* classes on the API server | Exploitation statusNot exploited | FixYes | Published11/09/2026 | SeverityHigh |
|---|
CVE-2026-111395Apache Airflow: Reserved serialization keys in Dag run conf crash the scheduler or are rebuilt as objects in the Triggerer via deadline callbacks | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-107474Apache Airflow: Connections API: apprise connection "config" extra returned in cleartext | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-101031Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier | Exploitation statusNot confirmed | FixYes | Published11/09/2026 | SeverityUnknown |
|---|
CVE-2026-86473Apache Software Foundation's Apache Airflow bearer-token logout flaw leaves sessions valid | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityCritical |
|---|
CVE-2026-82355Apache Software Foundation Apache Airflow session fixation causes principal confusion | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityMedium |
|---|
CVE-2026-75158Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter | Exploitation statusNot exploited | FixYes | Published09/21/2026 | SeverityMedium |
|---|
CVE-2026-75157Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression) | Exploitation statusNot exploited | FixYes | Published09/18/2026 | SeverityHigh |
|---|
CVE-2026-68971Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-68970Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UI | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-68969Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-68968Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-68076Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-67587Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-67260Apache Airflow scheduler arbitrary code execution via awaiting_input deserialization | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-65017Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass) | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-59244Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UI | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-59242Apache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpoint | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-58076Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables DAG-author RCE on Scheduler / API Server | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityHigh |
|---|
CVE-2026-54183Apache Airflow: Airflow Variables were not masked in the UI for authenticated users | Exploitation statusNot exploited | FixYes | Published08/12/2026 | SeverityMedium |
|---|
CVE-2026-49487Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs | Exploitation statusNot exploited | FixYes | Published07/07/2026 | SeverityMedium |
|---|
CVE-2026-49296Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id} | Exploitation statusNot exploited | FixYes | Published07/07/2026 | SeverityMedium |
|---|
CVE-2026-48892Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options | Exploitation statusNot exploited | FixYes | Published07/07/2026 | SeverityMedium |
|---|
CVE-2026-48891Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target | Exploitation statusNot exploited | FixYes | Published07/07/2026 | SeverityMedium |
|---|
CVE-2026-48828Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key | Exploitation statusNot exploited | FixYes | Published07/07/2026 | SeverityMedium |
|---|
CVE-2026-33264Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize() | Exploitation statusNot exploited | FixYes | Published07/07/2026 | SeverityCritical |
|---|
CVE-2026-49298Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityHigh |
|---|
CVE-2026-49267Apache Airflow: No certificate validation on SMTP STARTTLS connections | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityMedium |
|---|
CVE-2026-48726Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityMedium |
|---|
CVE-2026-46764Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filter | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityMedium |
|---|
CVE-2026-45426Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityLow |
|---|
CVE-2026-45360Apache Airflow: Arbitrary import in custom deadline-reference deserialization | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityHigh |
|---|
CVE-2026-45192Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API Response | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityMedium |
|---|
CVE-2026-42360Apache Airflow: Rendered template truncation bypasses nested sensitive-key masking | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityMedium |
|---|
CVE-2026-42359Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityHigh |
|---|
CVE-2026-42358Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secrets | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityMedium |
|---|
CVE-2026-42252Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern | Exploitation statusNot exploited | FixYes | Published06/01/2026 | SeverityCritical |
|---|
120 Results | Page 1 of 3