Description
When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values (such as secrets), they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue has been fixed in Airflow 3.1.4 and 2.11.1, and users are strongly advised to upgrade to prevent potential disclosure of sensitive information.
Affected products
apache: airflow
References4
- lists.apache.org/thread/1qzlrjo2wmlzs0rrgzgslj2pzkor0dr2 Mailing ListVendor Advisory
- github.com/apache/airflow/pull/58252 Issue TrackingPatch
- github.com/apache/airflow/pull/61883 Issue TrackingPatch
- www.openwall.com/lists/oss-security/2025/12/12/2 Mailing ListThird Party Advisory
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 1% percentile: 60 · as of 12 November 2026
- CWE
- CWE-209
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.