Apache Airflow Command Injection

Apache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables DAG-author RCE on Scheduler / API Server

Apache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadget

Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDDEN_XCOM_KEYS validator

Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments

Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf

Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API

Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes

Apache Airflow: Command Injection in an example DAG

In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object

In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow

Apache Airflow: RCE by race condition in example_xcom dag

Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Session still functional after user is deactivated

Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

Apache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill id

Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutation

Apache Airflow: Exposing stack trace in case of constraint error

Apache Airflow: Users with asset materialization permisssions could trigger Dags they had no access to

Apache Airflow: JWT token appearing in logs

Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI

Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

The LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was misconfigured and contained improper checking of exceptions which disabled…

Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization

Apache Airflow: Arbitrary import in custom deadline-reference deserialization

Apache Airflow: Open Redirect Bypass Vulnerability

Apache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)