PT-2026-45384 · Apache · Apache Airflow
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apache Airflow versions prior to 3.2.2
Description
A bug in the
KubernetesExecutor causes JSON Web Tokens (JWT), used by worker pods to authenticate against the Execution API, to be passed to the worker container as command-line arguments. These tokens are visible in the pod specification. An authenticated UI or API user with read-only Kubernetes access to the cluster, such as the pods/get permission in the Airflow namespace, can retrieve the JWT via the kubectl describe pod output. This allows the user to call state-mutating Execution API endpoints to trigger DAG runs, clear runs, or read and write Variables, Connections, and XComs, effectively impersonating a running task.Recommendations
Upgrade to version 3.2.2 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Airflow