Known Vulnerabilities for Apache Airflow by Apache Software Foundation
Listed below are 10 of the newest known vulnerabilities associated with "Apache Airflow" by "Apache Software Foundation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-50203 json | A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or comp... | Not Provided | 2026-06-17 | 2026-06-17 |
| CVE-2026-49818 json | The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a contai... | Not Provided | 2026-06-09 | 2026-06-10 |
| CVE-2026-49487 json | In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwarg... | Not Provided | 2026-07-07 | 2026-07-07 |
| CVE-2026-49486 json | The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, s... | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-49298 json | A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API ... | Not Provided | 2026-06-01 | 2026-06-02 |
| CVE-2026-49297 json | Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS object names... | Not Provided | 2026-07-06 | 2026-07-06 |
| CVE-2026-49296 json | Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same... | Not Provided | 2026-07-07 | 2026-07-07 |
| CVE-2026-49267 json | Apache Airflow's EmailOperator and the underlying `airflow.utils.email` helpers established SMTP STARTTLS connections without... | Not Provided | 2026-06-01 | 2026-06-02 |
| CVE-2026-48892 json | The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BA... | Not Provided | 2026-07-07 | 2026-07-07 |
| CVE-2026-48891 json | A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-le... | Not Provided | 2026-07-07 | 2026-07-07 |