Skip to content
Threat Feed
Subscribe

Product

Airflow (< 3.4.0)

3 briefs RSS
low advisory

Apache Airflow: CLI command argument masking failure (CVE-2026-86468)

Apache Airflow versions prior to 3.4.0 fail to mask secrets in CLI audit logs when using specific command arguments, allowing unauthorized access to plaintext credentials.

Airflow
1t 1c
low advisory

Apache Airflow: Sensitive information exposure via unmasked camelCase keys (CVE-2026-111452)

Apache Airflow versions prior to 3.4.0 fail to redact sensitive information in task logs, templates, and API responses when keys are formatted in camelCase, potentially exposing secrets to authorized users.

Airflow
1t 1c
medium advisory

Apache Airflow: Secrets masker cleartext exposure (CVE-2026-113504)

Apache Airflow versions prior to 3.4.0 fail to mask secrets nested deeper than five levels, potentially exposing sensitive data in plain text within task logs and rendered templates.

Airflow
1t 1c