Executive brief
Apache Airflow is an open-source platform used to schedule and monitor complex workflows. A vulnerability in the Edge3 provider component allows users who can author workflows (DAGs) to execute unauthorized commands on the central web server. This could lead to a full system compromise, unauthorized data access, or disruption of business operations.
Technical details
A vulnerability exists in the Apache Airflow Providers Edge3 package (specifically versions prior to 2.0.0) when used with Airflow 2. The provider implicitly enables a non-public internal API, originally intended for development and testing of the Edge Provider. This API fails to properly restrict access, allowing a DAG author to perform Remote Code Execution (RCE) within the security context of the Airflow web server. The issue is classified as CWE-669 (Incorrect Resource Transfer Between Spheres). Users are advised to uninstall the affected provider from Airflow 2 environments and migrate to Airflow 3, as version 2.0.0 of the provider removes the vulnerable code and enforces a minimum requirement of Airflow 3.
Affected products
- Apache Software Foundation apache-airflow-providers-edge3 < 2.0.0
Timeline
- 2025-12-07: patched: Pull request to drop Airflow 2 support merged
- 2025-12-17: advisory: GitHub Advisory and NVD entry published