Sensitive Data Exposure in Apache Airflow Version Prior to 2.11.1

CVE-2025-27555

What is CVE-2025-27555?

Versions of Apache Airflow prior to 2.11.1 contain a vulnerability that allows authenticated users with audit log access to view sensitive connection parameters that should remain hidden. When these parameters are configured via the Airflow CLI, they are logged unencrypted in the audit logs and stored in the Airflow database. As a result, this exposure may pose risks, particularly to those users with audit log access. It is highly recommended for users to upgrade to version 2.11.1 or later to mitigate this risk. Additionally, users are advised to manually remove any entries containing sensitive connection values from the log table.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References