Executive brief
Apache Airflow Hive Provider Beeline remote code execution with Principal
Affected products
- PyPI apache-airflow-providers-apache-hive
Junglewise Threat Intelligence
CVE-2023-35797: PYSEC-2026-273 - Apache Airflow Hive Provider Beeline remote code execution with Principal
CVE-2023-35797 · Severity: low · CVSS 3.1 · Published 2026-06-29
Technologies: apache-airflow-providers-apache-hive (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1139 - Apache Airflow Apache Hive Provider Improper Input Validation vulnerability
- PYSEC-2026-772 - OS Command Injection in Apache Airflow
- PYSEC-2026-272 - Apache Airflow Hive Provider Improper Input Validation vulnerability
- PYSEC-2026-271 - Apache Airflow Hive Provider vulnerable to code injection
- PYSEC-2026-274 - Apache Airflow Hive Provider vulnerable to Command Injection