Skip to content
Threat Feed
Subscribe

Tag

Airflow

4 briefs RSS
critical advisory

Apache Airflow FAB Provider Vulnerability Allows Obtaining Administrator Rights

An unauthenticated, remote attacker can exploit a vulnerability in Apache Airflow FAB provider to bypass security measures and escalate privileges to gain administrator rights, allowing full control of the affected system.

Airflow FAB provider privilege-escalation defense-evasion web-application apache airflow
2t
high advisory

Multiple Vulnerabilities in Apache Airflow Allow Privilege Escalation

An attacker can exploit multiple vulnerabilities in Apache Airflow to bypass security controls and escalate their privileges, as reported by CERT-Bund.

Apache Airflow defense-evasion privilege-escalation apache airflow
1t
medium advisory

Apache Airflow Providers OpenSearch and Elasticsearch Information Disclosure Vulnerabilities

A remote, authenticated attacker can exploit multiple vulnerabilities in Apache Airflow Providers OpenSearch and Elasticsearch to disclose sensitive information.

Airflow Providers OpenSearch +1 airflow information-disclosure apache
1r 1t
low advisory

Apache Airflow OpenSearch Provider Credentials Leak via Task Logs (CVE-2026-43826)

The OpenSearch logging provider in Apache Airflow Providers OpenSearch versions before 1.9.1 wrote host URLs containing embedded credentials into task logs, potentially exposing them to unauthorized users with task-log read permission (CVE-2026-43826).

Airflow Providers OpenSearch credential-leak airflow opensearch
2r