PT-2025-15046 · Apache · Apache Airflow Common Sql Provider

Nxczje · Published 2025-04-04 · Updated 2025-11-12 · CVE-2025-30473

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Airflow Common SQL Provider versions prior to 1.24.1

Description The issue is related to an SQL Injection vulnerability in the Apache Airflow Common SQL Provider. This vulnerability allows an authenticated UI user to inject arbitrary SQL commands when triggering a DAG, potentially escalating privileges to execute commands they normally would not have.

Recommendations For versions prior to 1.24.1, upgrade to version 1.24.1 to fix the issue. As a temporary workaround, consider restricting access to the SQLTableCheckOperator and limiting the exposure of the partition clause to users. Avoid using the partition clause in SQLTableCheckOperator as a parameter to minimize the risk of exploitation.

Fix

RCE

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-04085

CVE-2025-30473

GHSA-5R62-MJF5-XWHJ

Affected Products

Apache Airflow Common Sql Provider

References · 16

• https://github.com/apache/airflow/pull/48098 · Patch
• https://osv.dev/vulnerability/ROOT-APP-PYPI-CVE-2025-30473 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30473 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30473 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04085 · Security Note
• https://osv.dev/vulnerability/GHSA-5r62-mjf5-xwhj · Vendor Advisory
• https://lists.apache.org/thread/53klkv790cylqcop0350w7nfq1y6h0t2 · Vendor Advisory
• https://github.com/apache/airflow · Note
• http://openwall.com/lists/oss-security/2025/04/06/3 · Note
• https://twitter.com/oss_security/status/1908244021316554909 · Twitter Post
• http://openwall.com/lists/oss-security/2025/04/06/1 · Note
• https://twitter.com/cybercronai/status/1909595962101706952 · Twitter Post
• http://openwall.com/lists/oss-security/2025/04/04/2 · Note
• https://t.me/cvedetector/22278 · Telegram Post
• http://openwall.com/lists/oss-security/2025/04/06/2 · Note