Database/Control plane, storage & DevOps
Airflow example Dag: shell command injection on the worker through an IPv6 zone identifier
Impact
The example_dag_decorator example Dag checks an IP address fetched over HTTP with Python's ipaddress module and then puts it into a shell command. ipaddress accepts IPv6 zone identifiers that contain arbitrary characters, so a server that the trigger's url parameter points at can inject shell commands. Those commands run on the Airflow worker, which usually holds connection credentials and can reach the rest of the cluster. This is an incomplete fix for CVE-2025-54941, so deployments that upgraded for that advisory are still affected.
Who can reach it
An authenticated Airflow user allowed to trigger the example Dag with a custom url parameter. Only deployments with load_examples enabled are affected.
What to do
Set load_examples = False, which Apache recommends for production anyway, or upgrade apache-airflow to 3.4.0 or later. Either way, restart the scheduler, API server and workers so the change takes effect.
References
Related entries
- Airflow: apprise connection config extra returned unmasked by the connections APICVE-2026-107474 · Apache Airflow connections API (apprise provider config extra)Unscored
- Airflow: reserved serialization keys in Dag run conf crash the scheduler or build objects in the TriggererCVE-2026-111395 · Apache Airflow scheduler and Triggerer (Dag run conf deserialization)Unscored
- Airflow secrets masker: values under camelCase keys left unredacted in logs and API responsesCVE-2026-111452 · Apache Airflow secrets masker (camelCase sensitive key names)Unscored
- Airflow: async connection test lets a create-only user overwrite another user's connectionCVE-2026-111455 · Apache Airflow asynchronous connection test (commit_on_success)Unscored
- Airflow secrets masker: secrets nested more than five levels deep shown in cleartextCVE-2026-113504 · Apache Airflow secrets masker (nesting depth limit)Unscored
- Airflow: failed token revocation at logout is ignored, so the token stays validCVE-2026-113508 · Apache Airflow API logout (server-side token revocation)Unscored
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.