Apache Airflow vulnerabilities
We track 1 vulnerability in Apache Airflow products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 10, 2020.
1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score
Latest Apache Airflow vulnerabilities
- 9.8 Critical severity
Apache Airflow's Experimental API Authentication Bypass Exploited
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and i