Apache Airflow Vulnerability Allows Unauthorized Access to Sensitive Data

CVE-2024-28746

Summary

A vulnerability in Apache Airflow, affecting versions 2.8.0 to 2.8.2, enables authenticated users with limited permissions to access sensitive resources such as variables and connections via the user interface. This access could lead to unauthorized information disclosure, making it crucial for users to upgrade to version 2.8.3 or newer to secure their environments. It is essential to apply this recommendation to maintain the integrity of the system and protected data.

References