Apache · product
Apache Airflow
167 CVEs · 2 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 2
- check available
- 5
- likely to be exploited
- 5
Every one of the 167 is a mark on the map. Named now: 1 to 26, most at risk first.
- Airflow Experimental <1.10.11 - REST API Auth Bypass
- Apache Airflow <=1.10.10 - Remote Code Execution
- AirFlow < 2.4.0 - Remote Code Execution
- Apache Airflow - Unauthenticated Variable Import
- Apache Airflow OS Command Injection
- Apache Airflow <=1.10.10 - Command Injection
- Apache Airflow <1.10.14 - Authentication Bypass
- Apache Airflow: Open redirect during login
- In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.
- The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as…
- Apache Airflow Reflected XSS via Origin Query Argument in URL
- Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow
- An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to i…
- No Authentication on Logging Server
- Apache Airflow: Lineage API endpoint for Experimental API missed authentication check
- In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack.
- In Apache Airflow 1.8.2 and earlier, an experimental Airflow feature displayed authenticated cookies, as well as passwords to databases used by Airflow. An attacker who has limite…
- CWE-284 Improper Access Control on Configurations Endpoint for the Stable API
- An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI.
- A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.
- Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges
- In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when cre…
- Apache Airflow: Reflected XSS via Origin Query Argument in URL
- In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
- Apache Airflow prior to 2.3.1 may include sensitive values in rendered template
- Apache Airflow: Privilege escalation using airflow logs
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.