DeutschShown in its original language — a full translation is planned for a future version.
Apache Airflow und Apache Airflow Keycloak Provider: Mehrere Schwachstellen
view advisory published 2026-04-19
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Airflow und dem Airflow Keycloak Provider ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-40948US | — | — | ||
The Keycloak authentication manager in `apache-airflow-providers-keycloak` did not generate or validate the OAuth 2.0 `state` parameter on the login / login-callback flow, and did… | ||||
| CVE-2026-32690US | — | — | ||
Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked.… | ||||
| CVE-2026-32228US | —OT elevated | — | ||
UI / API User with asset materialize permission could trigger dags they had no access to.
Users are advised to migrate to Airflow version 3.2.0 that fixes the issue. | ||||
| CVE-2026-30912US | — | — | ||
In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to… | ||||
| CVE-2026-30898US | — | — | ||
An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of… | ||||
| CVE-2026-25917US | — | — | ||
Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors ar… | ||||
02
references
External citations — patches, advisories, analysis.
- Apache Pony Mail vom 2026-04-19external
- Apache Pony Mail vom 2026-04-19external
- Apache Pony Mail vom 2026-04-19external
- Apache Pony Mail vom 2026-04-19external
- Apache Pony Mail vom 2026-04-19external
- Apache Pony Mail vom 2026-04-19external
- NIST Vulnerability Database vom 2026-04-19external
- NIST Vulnerability Database vom 2026-04-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan