Improper Redaction in Apache Airflow Leading to Exposure of Sensitive Information

CVE-2026-32690

What is CVE-2026-32690?

Sensitive data stored in JSON dictionaries within Apache Airflow may be exposed due to inadequate redaction mechanisms. If users retrieve variables that contain nested secret fields, these secrets remain visible since they are not masked properly. Organizations that utilize Apache Airflow for orchestration and workflow management should ensure they are using version 3.2.0 or later, which addresses this flaw. If sensitive values are stored in JSON format, it is crucial to update to the latest version to safeguard against potential data leaks.

References