Apache AirflowGHSA-v3c9-j6h9-66v4
Apache Airflow has a command injection vulnerability in "example_dag_decorator"
MediumCVE-2025-54941 · Published Oct 30, 2025 · updated Jul 7, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| apache-airflow PyPI | >= 3.0.0, < 3.0.5 | 3.0.5 |
Details and references
An example dag `example_dag_decorator` had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker. This however required that the example dags are enabled in production (not default) or the example dag code copied to build your own similar dag. If you used the `example_dag_decorator` please review it and apply the changes implemented in Airflow 3.0.5 accordingly.
- CVSS 4.0
- CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-78
- Also known as
- BIT-airflow-2025-54941, CVE-2025-54941, PYSEC-2026-1135
More Apache Airflow advisories
All Apache Airflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Oct 302025 | Apache Airflow `/api/v2/dagReports` executes DAG Python in API CVE-2025-62402Medium5.4fixed in 3.1.1 | Medium5.4 | 3.1.1 |
| Oct 302025 | Apache Airflow's create action can upsert existing Pools/Connections/Variables CVE-2025-62503Medium4.6fixed in 3.1.1 | Medium4.6 | 3.1.1 |
| Sep 262025 | Apache Airflow: Connection sensitive details exposed to users with READ permissions CVE-2025-54831Mediumfixed in 3.0.4 | Medium | 3.0.4 |
| Dec 152025 | Apache Airflow exposes secret values to authenticated UI users via rendered templates CVE-2025-66388Medium6.5fixed in 3.1.5 | Medium6.5 | 3.1.5 |
| Dec 172025 | Edge3 Worker RPC RCE on Airflow 2. CVE-2025-67895Critical9.8fixed in 2.0.0 | Critical9.8 | 2.0.0 |
| Jan 16 | Apache Airflow secrets in rendered templates could contain parts of sensitive values when truncated CVE-2025-68438High7.5fixed in 3.1.6 | High7.5 | 3.1.6 |