AI
Product
Airflow
On CISA KEVExploited in the wild
158
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 44Medium 97Low 3
Watch
Add Airflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-45402 | 6.1 | Nov 15 | In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint Affected: before 2.4.3 |
| CVE-2022-43982 | 6.1 | Nov 2 | Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL Affected: before 2.4.2 |
| CVE-2022-43985 | 6.1 | Nov 2 | Apache Airflow prior to 2.4.2 has an open redirect Affected: before 2.4.2 |
| CVE-2022-40754 | 6.1 | Sep 21 | In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint Affected: 2.3.0 through 2.3.4 |
| CVE-2021-45229 | 6.1 | Feb 25 | It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument Affected: through 2.2.3 |
| CVE-2021-28359 | 6.1 | May 2 | The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit Affected: 1.0.0 before 1.10.15; 2.0.0 before 2.0.2 |
| CVE-2020-17515 | 6.1 | Dec 11 | The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit Affected: before 1.10.15; 2.0.0 before 2.0.2 |
| CVE-2020-13944 | 6.1 | Sep 17 | In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit Affected: before 1.10.15; 2.0.0 before 2.0.2 |
| CVE-2020-9485 | 6.1 | Jul 17 | An issue was found in Apache Airflow versions 1.10.10 and below Affected: through 1.10.10 |
| CVE-2017-12614 | 6.1 | Aug 6 | It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack Affected: before 1.9.0 |
| CVE-2026-49267 | 5.9 | Jun 1 | Apache Airflow: No certificate validation on SMTP STARTTLS connections Affected: 2.0.0 before 3.2.2 |
| CVE-2026-41017 | 5.9 | Jun 1 | Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy Affected: 3.0.0 before 3.2.2 |
| CVE-2026-41016 | 5.9 | Apr 30 | Apache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP provider Affected: 2.0.0 before 3.0.0 |
| CVE-2024-27906 | 5.9 | Feb 29 | Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through… Affected: before 2.8.2 |
| CVE-2023-39441 | 5.9 | Aug 23 | Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate… Affected: before 2.7.0 |
| CVE-2024-25142 | 5.5 | Jun 14 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return "Cache-Control" header for dynamic content, which in case of… Affected: before 2.9.2 |
| CVE-2022-40954 | 5.5 | Nov 22 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to… Affected: before 2.3.0 |
| CVE-2018-20244 | 5.5 | Feb 27 | In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views Affected: before 1.10.2 |
| CVE-2026-59242 | 5.4 | Aug 12 | Apache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpoint Affected: before 3.3.1 |
| CVE-2026-68076 | 5.4 | Aug 12 | Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection Affected: before 3.3.1 |
| CVE-2025-62402 | 5.4 | Oct 30 | API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were… Affected: 3.0.0 before 3.1.1 |
| CVE-2024-39863 | 5.4 | Jul 17 | Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider Affected: before 2.9.3 |
| CVE-2024-32077 | 5.4 | May 14 | Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to… Affected: 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0; 2.9.0 |
| CVE-2023-47265 | 5.4 | Dec 21 | Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description… Affected: 2.6.0 through 2.7.3 |
| CVE-2023-29247 | 5.4 | May 8 | Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0 Affected: before 2.6.0 |
| CVE-2020-11983 | 5.4 | Jul 17 | An issue was found in Apache Airflow versions 1.10.10 and below Affected: through 1.10.10 |
| CVE-2024-29735 | 5.3 | Mar 26 | Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3 Affected: 2.8.2 through 2.8.4 |
| CVE-2023-25695 | 5.3 | Mar 15 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2 Affected: before 2.5.2 |
| CVE-2021-35936 | 5.3 | Aug 16 | If remote logging is not used, the worker (in the case of CeleryExecutor) or the scheduler (in the case of LocalExecutor) runs a Flask logging server and is listening on a… Affected: before 2.1.2 |
| CVE-2021-29621 | 5.3 | Jun 7 | Flask-AppBuilder is a development framework, built on top of Flask Affected: 1.10.0 |
| CVE-2021-26697 | 5.3 | Feb 17 | The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0 Affected: 2.0.0 |
| CVE-2020-17513 | 5.3 | Dec 14 | In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack Affected: before 1.10.13 |
| CVE-2024-50378 | 4.9 | Nov 8 | Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When… Affected: before 2.10.3 |
| CVE-2019-12398 | 4.8 | Jan 14 | In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary… Affected: before 1.10.5 |
| CVE-2019-12417 | 4.8 | Oct 30 | A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views Affected: through 1.10.5 |
| CVE-2019-0216 | 4.8 | Apr 10 | A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views Affected: through 1.10.2 |
| CVE-2024-26280 | 4.7 | Mar 1 | Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames… Affected: before 2.8.2 |
| CVE-2022-38170 | 4.7 | Sep 2 | In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `--daemon` flag which could result in a race condition… Affected: before 2.3.4 |
| CVE-2025-62503 | 4.6 | Oct 30 | User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action Affected: 3.0.0 before 3.1.1 |
| CVE-2025-54941 | 4.6 | Oct 30 | An example dag `example_dag_decorator` had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker Affected: 3.0.0 before 3.0.5 |
| CVE-2026-75158 | 4.3 | Sep 21 | Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter Affected: before 3.3.2 |
| CVE-2026-54183 | 4.3 | Aug 12 | Apache Airflow: Airflow Variables were not masked in the UI for authenticated users Affected: before 3.3.1 |
| CVE-2026-48891 | 4.3 | Jul 7 | Apache Airflow: /ui/dependencies scheduling graph leaks unreadable Dag identifiers via trigger/sensor dep.source/dep.target Affected: before 3.3.0 |
| CVE-2026-41014 | 4.3 | Jun 1 | Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints Affected: 3.2.0 before 3.2.2 |
| CVE-2026-46764 | 4.3 | Jun 1 | Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filter Affected: before 3.2.2 |
| CVE-2026-38743 | 4.3 | Apr 24 | Apache Airflow: Dags endpoint might provide access to otherwise inaccessible entities Affected: before 3.2.1 |
| CVE-2026-40690 | 4.3 | Apr 24 | Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users Affected: before 3.2.1 |
| CVE-2026-28563 | 4.3 | Mar 17 | Apache Airflow: DAG authorization bypass Affected: 3.0.0 before 3.1.8 |
| CVE-2024-31869 | 4.3 | Apr 18 | Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via the "configuration" UI page when… Affected: 2.7.0 before 2.9.0 |
| CVE-2023-48291 | 4.3 | Dec 21 | Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could… Affected: before 2.8.0 |