CVE-2026-27173: Apache Airflow CNCF Kubernetes provider JWT exposure in Pod arguments

CVE-2026-27173 · Severity: high · CVSS 8.7 · Published 2026-05-19

A vulnerability in the Apache Airflow Kubernetes provider allows users with limited, read-only access to Kubernetes pods to view sensitive security tokens. These tokens are used by Airflow to manage automated tasks. An attacker could use these stolen tokens to impersonate legitimate tasks, potentially allowing them to modify the Airflow database or interfere with business workflows.

Technologies: apache-airflow-providers-cncf-kubernetes (PyPI). Vendors: Apache Software Foundation, PyPI.

Quick answers

Is CVE-2026-27173 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-27173 being exploited in the wild.
How severe is CVE-2026-27173?
High severity, with a CVSS score of 8.7, published 19 May 2026.
Which products and versions are affected?
Apache Software Foundation Airflow CNCF Kubernetes Provider < 10.17.0; apache-airflow-providers-cncf-kubernetes (PyPI) < 10.17.0, ECOSYSTEM:introduced=0,fixed=10.17.0.
Is there a fix for CVE-2026-27173?
Yes. apache-airflow-providers-cncf-kubernetes (PyPI): upgrade to 10.17.0 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-27173 attacked?
It is attacked with local access, in a software library.
Am I affected by CVE-2026-27173?
Check whether you run Apache Software Foundation Airflow CNCF Kubernetes Provider or apache-airflow-providers-cncf-kubernetes (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

  • apache-airflow-providers-cncf-kubernetes (PyPI): upgrade to 10.17.0 or later
    pip install "apache-airflow-providers-cncf-kubernetes>=10.17.0"

Technical details

A vulnerability in the Apache Airflow CNCF Kubernetes provider (apache-airflow-providers-cncf-kubernetes) stems from the exposure of JWT tokens within the command-line arguments of KubernetesExecutor workers. Because these arguments are visible to any user with read-only access to Kubernetes Pods (e.g., via 'kubectl describe pod'), an attacker with low privileges can capture the tokens. These tokens grant access to the Airflow Task SDK, enabling the attacker to perform actions reserved for running tasks, such as modifying the state of the Airflow database. The issue is addressed in version 10.17.0 by implementing a two-token mechanism that restricts the scope and exposure of sensitive credentials.

Affected products

  • Apache Software Foundation apache-airflow-providers-cncf-kubernetes < 10.17.0

Identifiers

  • CVE-2026-27173
  • GHSA-524w-vq63-2xhf
  • PYSEC-2026-2365

Timeline

  • 2026-01-04: other: Initial pull request for two-token mechanism submitted
  • 2026-05-19: disclosed: Vulnerability disclosed and CVE assigned
  • 2026-05-19: advisory: GitHub Advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.