Apache Airflow: Connection and Variable secrets stored in cleartext in audit log rows

Impact

Airflow wrote Connection and Variable secret values into the audit log's Log.extra column without masking them, because the secrets masker only matched configured sensitive key names. A low-privilege user who can read the event-log / audit API can recover those credentials verbatim, even with no access to the connection or variable itself. On an ML platform, Airflow connections often hold cloud storage keys, database passwords and cluster API tokens, so this can lead to the data and compute the pipelines touch. Airflow 2.x is also affected and will not be fixed.

Who can reach it

Any authenticated Airflow user with read access to the event-log / audit API. Authentication is required, but only low privilege.

What to do

Upgrade to apache-airflow 3.4.0 or later and restart the scheduler, API server and workers. The fix masks these values and restricts the affected audit rows to authorized users. Airflow 2.x is end of life with no fix, so the only path is migrating to 3.4.0+. The advisory does not say whether rows written before the upgrade are cleaned up. Treat secrets that went through the audit log as exposed and consider rotating them.

References

Related entries

• DMTF SPDM specification DSP0274 1.4 (FINISH transcript definition): A specification-level defect rather thanCVE-2026-61810 · DMTF SPDM specification DSP0274 1.4 (FINISH transcript definition)Unscored
• Linux x86/mm - broadcast TLB flush with PCID disabled: Booting with nopcid clears the PCID feature but broadcast TLBCVE-2026-64229 · Linux x86/mm - broadcast TLB flush with PCID disabledUnscored
• Linux crypto/ccp - SNP initialization on ioctl(SNP_COMMIT): The ccp driver initialised SNP from the SNP_COMMIT ioctlCVE-2026-64309 · Linux crypto/ccp - SNP initialization on ioctl(SNP_COMMIT)Unscored
• Linux iommu/amd - IRQ-unsafe locking in guest domain allocation: An IRQ-unsafe lock taken during AMD IOMMU guest domainCVE-2026-68347 · Linux iommu/amd - IRQ-unsafe locking in guest domain allocationUnscored
• Apache Airflow CeleryExecutor: forged callbacks from the Celery broker run arbitrary code on workersCVE-2026-68982 · Apache Airflow CeleryExecutor (ExecuteCallback workloads)Unscored
• Linux perf/x86/amd/core - Branch Sampling enabled from the SVM reload path: Branch Sampling and Last Branch RecordCVE-2026-72325 · Linux perf/x86/amd/core - Branch Sampling enabled from the SVM reload pathUnscored