PT-2026-31606 · Apache · Apache Airflow

Anish Giri + 2 · CVE-2025-57735 · Published 2026-04-09 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.2.0

Description Apache Airflow is affected by an issue where JWT tokens remain valid after a user logs out, potentially allowing unauthorized access if the token is intercepted. The JWT token associated with a user's authentication was not invalidated upon logout. This could allow an attacker who intercepts the token to reuse it for unauthorized access.

Recommendations Upgrade to version 3.2.0 or later to resolve this issue.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

BIT-AIRFLOW-2025-57735

BIT-AIRFLOW-2026-48726

CVE-2025-57735

ECHO-667C-B1CF-DD2B

GHSA-C92R-G8J5-VHCX

GHSA-VR7M-C6V4-8CX8

PYSEC-2026-187

PYSEC-2026-269

Affected Products

Apache Airflow

References · 33

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57735.json · Exploit
• https://github.com/apache/airflow/pull/56633 · Patch
• https://github.com/apache/airflow/pull/61339 · Patch
• https://osv.dev/vulnerability/BIT-airflow-2026-48726 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-187 · Vendor Advisory
• https://lists.apache.org/thread/ovn8mpd8zkc604hojt7x3wsw3kc60x98 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-269 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vr7m-c6v4-8cx8 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c92r-g8j5-vhcx · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-57735 · Security Note
• https://osv.dev/vulnerability/BIT-airflow-2025-57735 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-57735 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57735 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48726 · Security Note
• https://github.com/apache/airflow · Note