Apache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UI

Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)

Apache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartext

Apache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UI

Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints

Apache Airflow: Task-instance API exposes secrets in deferred trigger kwargs

Apache Airflow: Bulk JSON Variables bypass should_hide_value_for_key - redact() called without the key

Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}

Apache Airflow: Config API leaks per-key secrets backend kwargs - masker bypass on synthetic options

Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler

Apache Airflow: Rendered template truncation bypasses nested sensitive-key masking

Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secrets

Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path

Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API Response

Apache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access

Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)

Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata

Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli

Apache Airflow: Disclosure of secrets to UI via kwargs

Apache Airflow: Airflow externalLogUrl Permission Bypass

Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors

Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI

Apache Airflow 3 introduced a change to the handling of sensitive information in Connections

Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the Airflow worker serializes this configuration file as a…

Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access. This…

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable

Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible…

Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in…

Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could…

Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to list warnings for all DAGs, even if the user had no…

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in…

Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could…

Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a…

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that…

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by…

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view

In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations

In Apache Airflow prior to 2.2.0

Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive…

In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase

Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider…

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint

Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL

Apache Airflow prior to 2.4.2 has an open redirect

In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint

It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit

The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit

In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit