Advisoriesby IbisApache AirflowGHSA-v3c9-j6h9-66v4
Apache Airflow has a command injection vulnerability in "example_dag_decorator"
Fix: upgrade to 3.0.5 or later
An example dag example_dag_decorator had non-validated parameter that allowed the UI user to redirect the example to a malicious server and execute code on worker. This however required that the example dags are enabled in production (not default) or the example dag code copied to build your own similar dag. If you used the example_dag_decorator please review it and apply the changes implemented in Airflow 3.0.5 accordingly.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| apache-airflow PyPI | >= 3.0.0, < 3.0.5 | 3.0.5 |
Details and references
- CVSS 4.0
- CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-78
- Also known as
- BIT-airflow-2025-54941, CVE-2025-54941, PYSEC-2026-1135
More Apache Airflow advisories
All Apache Airflow
Apache Airflow proxy credentials for various providers might leak in task logsCVE-2025-68675fixed in 2.11.1 +1Edge3 Worker RPC RCE on Airflow 2CVE-2025-67895fixed in 2.0.0Apache Airflow exposes secret values to authenticated UI users via rendered templatesCVE-2025-66388fixed in 3.1.5Apache Airflow `/api/v2/dagReports` executes DAG Python in APICVE-2025-62402fixed in 3.1.1Apache Airflow's create action can upsert existing Pools/Connections/VariablesCVE-2025-62503fixed in 3.1.1Apache Airflow: Connection sensitive details exposed to users with READ permissionsCVE-2025-54831fixed in 3.0.4