PT-2026-45974 · Pypi · Apache Airflow

Published 2026-06-01 · Updated 2026-06-01

OSV

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g. /etc/passwd or airflow.cfg) or (b) supply a task id containing .. sequences accepted by the Task SDK's KEY REGEX (write-path attack), and in both cases the FileTaskHandler resolves the log path outside the configured base log folder, leaking or overwriting arbitrary files. Only affects deployments where the worker log folder is shared with the API server. Users are advised to upgrade to apache-airflow 3.2.2 or later. As a defense-in-depth mitigation, deploy the worker and API server with separate log volumes so that worker-controlled paths cannot reach the API server's filesystem.

Fix

Related Identifiers

PYSEC-2026-181

Affected Products

Apache Airflow

References · 4

• https://osv.dev/vulnerability/PYSEC-2026-181 · Vendor Advisory
• https://github.com/apache/airflow/pull/65325 · Note
• http://openwall.com/lists/oss-security/2026/05/31/1 · Note
• https://lists.apache.org/thread/823334db2559xjlwt59gpzjz47thnscl · Note