Описание
Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access. Users are recommended to upgrade to Apache Airflow 3.1.7 or later, which resolves this issue.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| airflow | itp | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/02/09/2
Связанные уязвимости
CVSS3: 6.5
nvd
6 месяцев назад
Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access. Users are recommended to upgrade to Apache Airflow 3.1.7 or later, which resolves this issue.
CVSS3: 6.5
github
6 месяцев назад
Apache Airflow Has an Authorization Bypass That Allows Unauthorized Task Log Access