Token Reuse Vulnerability in Apache Airflow by Apache

CVE-2025-57735

What is CVE-2025-57735?

A security flaw in Apache Airflow allows the reuse of JWT tokens by failing to invalidate user tokens upon logout. If an attacker intercepts a valid token, they could gain unauthorized access, potentially compromising sensitive data and user accounts. The issue has been addressed in Apache Airflow version 3.2.0 and later, which now implements essential token invalidation protocols to enhance security during logout scenarios.

References