# apache-airflow (PyPI) vulnerabilities

Source: https://junglewise.ai/threats/technologies/apache-airflow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/technologies/apache-airflow.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 159 vulnerabilities in apache-airflow (PyPI): 0 in the last 7 days and 3 in the last 90 days, 11 of them critical and 2 exploited in the wild. The most recent, CVE-2026-86473, was published on 21 September 2026. Nothing in the last four weeks, down from 3 vulnerabilities in the four before. 0 critical against 1.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 3
- All time: 159 (11 critical, 2 exploited in the wild)

## About apache-airflow (PyPI)

Python package for programmatically authoring, scheduling, and monitoring workflows.

## Latest apache-airflow (PyPI) vulnerabilities

- [CVE-2026-86473: Apache Airflow Core API logout incomplete token revocation](https://junglewise.ai/threats/cve-2026-86473-apache-airflow-the-core-api-logout-endpoint-revokes-only-a) (critical, CVSS 9.1, published 21 Sep 2026)
- [CVE-2026-82355: Apache Airflow authentication bypass via session cookie precedence](https://junglewise.ai/threats/cve-2026-82355-when-a-request-to-the-airflow-core-api-carries-both-a-session) (medium, CVSS 4.2, published 21 Sep 2026)
- [CVE-2026-75158: Apache Airflow information disclosure in /assets/events API](https://junglewise.ai/threats/cve-2026-75158-apache-airflow-s-assets-events-api-returned-asset-events-for) (medium, CVSS 4.3, published 21 Sep 2026)
- [CVE-2026-68971: Apache Airflow authorization bypass in asset materialization and XCom endpoints](https://junglewise.ai/threats/cve-2026-68971-apache-airflow-authorization-bypass-in-asset-materialization-and) (medium, CVSS 6.5, published 12 Aug 2026)
- [CVE-2026-68970: Apache Airflow Task SDK variable masking bypass for list-shaped values](https://junglewise.ai/threats/cve-2026-68970-apache-airflow-task-sdk-variable-masking-bypass-for-list-shaped) (medium, CVSS 6.5, published 12 Aug 2026)
- [CVE-2026-68969: Apache Airflow information disclosure in audit logs](https://junglewise.ai/threats/cve-2026-68969-apache-airflow-information-disclosure-in-audit-logs) (medium, CVSS 6.5, published 12 Aug 2026)
- [CVE-2026-68968: Apache Airflow Backfill API authorization bypass via type coercion mismatch](https://junglewise.ai/threats/cve-2026-68968-apache-airflow-backfill-api-authorization-bypass-via-type) (high, CVSS 7.5, published 12 Aug 2026)
- [CVE-2026-68076: Apache Airflow environment-variable secrets backend team-scope bypass](https://junglewise.ai/threats/cve-2026-68076-apache-airflow-environment-variable-secrets-backend-team-scope) (medium, CVSS 5.4, published 12 Aug 2026)
- [CVE-2026-67587: Apache Airflow arbitrary module import via deserialized callback](https://junglewise.ai/threats/cve-2026-67587-apache-airflow-arbitrary-module-import-via-deserialized-callback) (high, CVSS 8.8, published 12 Aug 2026)
- [CVE-2026-67260: Apache Airflow unsafe deserialization in awaiting_input task state](https://junglewise.ai/threats/cve-2026-67260-apache-airflow-unsafe-deserialization-in-awaiting-input-task) (high, CVSS 7.3, published 12 Aug 2026)
- [CVE-2026-65017: Apache Airflow Config API sensitive value masking bypass in multi-team mode](https://junglewise.ai/threats/cve-2026-65017-apache-airflow-config-api-sensitive-value-masking-bypass-in-multi) (medium, CVSS 6.5, published 12 Aug 2026)
- [CVE-2026-59244: Apache Airflow secrets exposure in Rendered Templates UI](https://junglewise.ai/threats/cve-2026-59244-apache-airflow-secrets-exposure-in-rendered-templates-ui) (medium, CVSS 6.5, published 12 Aug 2026)
- [CVE-2026-59242: Apache Airflow XCom deserialization arbitrary class instantiation](https://junglewise.ai/threats/cve-2026-59242-apache-airflow-xcom-deserialization-arbitrary-class-instantiation) (medium, CVSS 5.4, published 12 Aug 2026)
- [CVE-2026-58076: Apache Airflow unsafe exception deserialization remote code execution](https://junglewise.ai/threats/cve-2026-58076-apache-airflow-unsafe-exception-deserialization-remote-code) (high, CVSS 8.8, published 12 Aug 2026)
- [CVE-2026-54183: Apache Airflow secrets masker bypass in UI display](https://junglewise.ai/threats/cve-2026-54183-apache-airflow-secrets-masker-bypass-in-ui-display) (medium, CVSS 4.3, published 12 Aug 2026)
- [CVE-2026-32794: Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange](https://junglewise.ai/threats/cve-2026-32794-apache-airflow-provider-for-databricks-tls-certificate) (low, CVSS 3.1, published 13 Jul 2026)
- [CVE-2024-56373: PYSEC-2026-2355 - Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table](https://junglewise.ai/threats/cve-2024-56373-apache-airflow-vulnerable-to-code-injection-in-the-web-server) (low, CVSS 3.1, published 13 Jul 2026)
- [CVE-2025-27555: PYSEC-2026-2347 - Apache Airflow exposes sensitive information in its log files](https://junglewise.ai/threats/cve-2025-27555-apache-airflow-exposes-sensitive-information-in-its-log-files) (low, CVSS 3.1, published 13 Jul 2026)
- [CVE-2023-51702: PYSEC-2026-2350 - Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without…](https://junglewise.ai/threats/cve-2023-51702-apache-airflow-cncf-kubernetes-provider-apache-airflow-kubernetes) (low, CVSS 3.1, published 13 Jul 2026)
- [CVE-2023-46215: PYSEC-2026-2364 - Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability](https://junglewise.ai/threats/cve-2023-46215-apache-airflow-celery-provider-insertion-of-sensitive-information) (low, CVSS 3.1, published 13 Jul 2026)
- [CVE-2023-39441: PYSEC-2026-2368 - Apache Airflow missing Certificate Validation](https://junglewise.ai/threats/cve-2023-39441-apache-airflow-missing-certificate-validation) (low, CVSS 3.1, published 13 Jul 2026)
- [CVE-2024-45784: PYSEC-2026-1112 - Apache Airflow: Sensitive configuration values are not masked in the logs by default](https://junglewise.ai/threats/cve-2024-45784-apache-airflow-sensitive-configuration-values-are-not-masked-in) (low, CVSS 3.1, published 7 Jul 2026)
- [CVE-2024-50378: PYSEC-2026-1134 - Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data](https://junglewise.ai/threats/cve-2024-50378-apache-airflow-vulnerable-to-insertion-of-sensitive-information) (low, CVSS 3.1, published 7 Jul 2026)
- [CVE-2024-31869: PYSEC-2026-1128 - Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used](https://junglewise.ai/threats/cve-2024-31869-apache-airflow-sensitive-configuration-disclosure-in-ui) (low, CVSS 3.1, published 7 Jul 2026)
- [CVE-2024-29735: PYSEC-2026-1132 - Apache Airflow Improper Preservation of Permissions vulnerability](https://junglewise.ai/threats/cve-2024-29735-apache-airflow-improper-preservation-of-permissions-vulnerability) (low, CVSS 3.1, published 7 Jul 2026)

## Most severe apache-airflow (PyPI) vulnerabilities

- [CVE-2020-13927: Authentication bypass in Apache Airflow](https://junglewise.ai/threats/cve-2020-13927-apache-airflow-s-experimental-api-authentication-bypass) (critical, exploited in the wild, CVSS 3.1, published 10 Nov 2020)
- [CVE-2020-11978: Remote code execution (RCE) in Apache Airflow](https://junglewise.ai/threats/cve-2020-11978-apache-airflow-command-injection) (critical, exploited in the wild, CVSS 3.1, published 17 Jul 2020)
- [CVE-2023-22884: Command Injection in Apache Airflow and Apache Airflow MySQL Provider](https://junglewise.ai/threats/cve-2023-22884-command-injection-in-apache-airflow-and-apache-airflow-mysql) (critical, CVSS 9.8, published 21 Jan 2023)
- [CVE-2022-40189: OS Command Injection in Apache Airflow](https://junglewise.ai/threats/cve-2022-40189-os-command-injection-in-apache-airflow) (critical, CVSS 9.8, published 22 Nov 2022)
- [CVE-2022-38649: OS Command Injection in Apache Airflow](https://junglewise.ai/threats/cve-2022-38649-os-command-injection-in-apache-airflow) (critical, CVSS 9.8, published 22 Nov 2022)
- [CVE-2023-25693: Apache Airflow Sqoop Provider improper input validation](https://junglewise.ai/threats/cve-2023-25693-apache-airflow-sqoop-provider-improper-input-validation) (critical, CVSS 9.8, published 24 Feb 2023)
- [CVE-2026-33264: Apache Airflow RCE via Deserialization in BaseSerialization](https://junglewise.ai/threats/cve-2026-33264-apache-airflow-rce-via-deserialization-in-baseserialization) (critical, CVSS 9.8, published 7 Jul 2026)
- [CVE-2025-67895: Apache Airflow Providers Edge3 RCE in web server context](https://junglewise.ai/threats/cve-2025-67895-apache-airflow-providers-edge3-rce-in-web-server-context) (critical, CVSS 9.8, published 17 Dec 2025)
- [CVE-2025-57735: Apache Airflow insufficient session expiration in JWT logout](https://junglewise.ai/threats/cve-2025-57735-apache-airflow-insufficient-session-expiration-in-jwt-logout) (critical, CVSS 9.1, published 9 Apr 2026)
- [CVE-2026-42252: Apache Airflow command injection via unsafe documentation example](https://junglewise.ai/threats/cve-2026-42252-apache-airflow-command-injection-via-unsafe-documentation-example) (critical, CVSS 9.1, published 1 Jun 2026)

## Vulnerabilities per week

Nothing in the last four weeks, down from 3 vulnerabilities in the four before. 0 critical against 1.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 3 | 1 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## Other PyPI technologies

- [tensorflow (PyPI)](https://junglewise.ai/threats/technologies/pypi-tensorflow): 435 vulnerabilities
- [tensorflow-cpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-cpu): 430 vulnerabilities
- [tensorflow-gpu (PyPI)](https://junglewise.ai/threats/technologies/tensorflow-gpu): 427 vulnerabilities
- [open-webui (PyPI)](https://junglewise.ai/threats/technologies/open-webui): 177 vulnerabilities
- [Django (PyPI)](https://junglewise.ai/threats/technologies/django): 173 vulnerabilities
- [pillow (PyPI)](https://junglewise.ai/threats/technologies/pillow): 125 vulnerabilities
- [praisonai (PyPI)](https://junglewise.ai/threats/technologies/pypi-praisonai): 120 vulnerabilities
- [vllm (PyPI)](https://junglewise.ai/threats/technologies/pypi-vllm): 117 vulnerabilities
- [plone (PyPI)](https://junglewise.ai/threats/technologies/pypi-plone): 101 vulnerabilities
- [mlflow (PyPI)](https://junglewise.ai/threats/technologies/mlflow): 88 vulnerabilities
- [picklescan (PyPI)](https://junglewise.ai/threats/technologies/picklescan): 86 vulnerabilities
- [exiv2 (PyPI)](https://junglewise.ai/threats/technologies/exiv2): 85 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "apache-airflow (PyPI) vulnerabilities", https://junglewise.ai/threats/technologies/apache-airflow, 13 November 2026.