Apache AirflowGHSA-fv47-pqh6-wxgq
Apache Airflow exposes secret values to authenticated UI users via rendered templates
Medium6.5CVE-2025-66388 · Published Dec 15, 2025 · updated Jun 5, 2026
A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization. Users are recommended to upgrade to version 3.1.4, which fixes this issue.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| apache-airflow PyPI | >= 3.1.0, < 3.1.5 | 3.1.5 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-201
- Also known as
- BIT-airflow-2025-66388, CVE-2025-66388, PYSEC-2025-86
- nvd.nist.gov/vuln/detail/CVE-2025-66388
- github.com/apache/airflow/pull/58767
- github.com/apache/airflow/pull/58772
- github.com/apache/airflow
- github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2025-86.yaml
- lists.apache.org/thread/mv9hzsx8grjf7gdlkxwppnpbtogtls2g
- www.openwall.com/lists/oss-security/2025/12/12/1
More Apache Airflow advisories
All Apache Airflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jan 16 | Apache Airflow proxy credentials for various providers might leak in task logs High7.5Jan 16 | High7.5 | 2.11.1+1 more |
| Jan 16 | Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncatedHigh7.5Jan 16 | High7.5 | 3.1.6 |
| Dec 172025 | Edge3 Worker RPC RCE on Airflow 2Critical9.8Dec 17, 2025 | Critical9.8 | 2.0.0 |
| Oct 302025 | Apache Airflow `/api/v2/dagReports` executes DAG Python in APIMedium5.4Oct 30, 2025 | Medium5.4 | 3.1.1 |
| Oct 302025 | Apache Airflow's create action can upsert existing Pools/Connections/VariablesMedium4.6Oct 30, 2025 | Medium4.6 | 3.1.1 |
| Oct 302025 | Apache Airflow has a command injection vulnerability in "example_dag_decorator"MediumOct 30, 2025 | Medium | 3.0.5 |