Apache Airflow: Bulk Variables API skips key-based redaction, returning JSON variable secrets in cleartext

Impact

The Bulk Variables API invoked the redactor without the variable's key, so the should_hide_value_for_key check that fires on names ending in _password, _token or _secret could never run for JSON-decodable values. An authenticated user with bulk Variable read permission reads those secrets in plaintext. On a fleet where Airflow schedules training and data-movement jobs, Airflow Variables typically hold registry pulls, object-store keys and cluster API tokens, so this widens any low-privilege Airflow account into credentials for the storage and compute it orchestrates. Confidentiality only - the API does not gain write access here.

Who can reach it

Network access to the Airflow UI or REST API as an authenticated user holding bulk Variable read permission. No admin role needed.

What to do

Upgrade to apache-airflow 3.3.0 or later and restart the API server and schedulers; the fix landed on main after 3.2.2 and there is no 3.2.x backport, so 3.2 users must move to 3.3. Rotate any secret stored in a JSON-typed Variable that was readable during the exposure window. GPU workers are untouched by the upgrade.

References

Related entries

• Apache Airflow: Config API exposes secrets-backend kwargs overrides unmasked, leaking Vault credentialsCVE-2026-48892 · Apache Airflow (Config API, per-key secrets-backend environment overrides)Medium
• Apache Airflow: Dag source endpoint returns the whole file, exposing co-located Dags the caller cannot readCVE-2026-49296 · Apache Airflow (Dag source endpoint, GET /api/v2/dagSources/{dag_id})Medium
• Apache Airflow: task-instance API returns deferred trigger kwargs unmasked, exposing secrets passed to triggersCVE-2026-49487 · Apache Airflow (REST API task-instance endpoints, deferred trigger kwargs)Medium
• Dell OpenManage Server Administrator (relative path traversal): A low-privileged remote attacker reads arbitrary filesCVE-2026-56794 · Dell OpenManage Server Administrator (relative path traversal)Medium
• Apache Airflow: JSON Variable secrets shown in cleartext in the Rendered Templates viewCVE-2026-59244 · Apache Airflow secrets masker (Rendered Templates view, var.json dict values)Medium
• Apache Airflow: masker misses team-prefixed config sections, exposing team Celery broker URLs with credentialsCVE-2026-65017 · Apache Airflow (secrets masker, team-scoped config sections in multi-team mode)Medium