Database/Control plane, storage & DevOps
Apache Airflow 3.0.3: users with read-only permissions can view sensitive connection fields
Impact
Airflow 3 moved to a write-only model for sensitive Connection fields: only connection editors were supposed to see passwords and extras. In 3.0.3 that model was broken, and any user with READ permission could retrieve the sensitive values through both the REST API and the UI, bypassing AIRFLOW__CORE__HIDE_SENSITIVE_VAR_CONN_FIELDS. On a fleet where Airflow drives data loading, training launches and model promotion, those connections are the credentials for object storage, registries, databases and cluster APIs - so a low-privilege viewer account becomes a credential dump. Airflow 2.x is unaffected, where editor visibility was the documented behavior.
Who can reach it
Any authenticated Airflow user holding only read permissions on Connections, via the REST API or the web UI. No editor role and no cluster access required.
What to do
Upgrade Airflow from 3.0.3 to 3.0.4 or later - a scheduler/webserver/API-server restart, no GPU node impact. Treat any connection secret that existed on a 3.0.3 install as exposed to every read-capable user and rotate it; the config flag that normally hides these fields did not help here.
References
Related entries
- Apache Airflow: secrets not redacted in rendered templates are visible to any authenticated UI userCVE-2025-66388 · Apache Airflow (rendered template fields, secret redaction)Medium
- pulp-ansible: collection remote token stored per worker leaks to an attacker-controlled remoteCVE-2026-103869 · pulp-ansible (bearer-token refresh for collection remotes)Medium
- GitLab CE/EE: malformed CSV import lets an authenticated user stall Sidekiq workersCVE-2026-1403 · GitLab CE/EE (CSV import, Sidekiq worker)Medium
- PostgreSQL pgcrypto: PGP functions emit recoverable cleartext when OpenSSL disables the cipherCVE-2026-14663 · PostgreSQL pgcrypto (pgp_sym_encrypt / pgp_pub_encrypt family)Medium
- Grafana: read-only Git Sync users can change a connection's configuration via its status subresourceCVE-2026-15577 · Grafana Git Sync provisioning (connection status subresource)Medium
- Keycloak: authenticated user can exhaust server memory via unbounded Prometheus metric labelsCVE-2026-16100 · Keycloak (user-event Prometheus metrics)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.