EUVD-2026-33593
GHSA-95v7-h9j5-gvjr
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
6Blast Radius
ecosystem impact- 4 pypi packages depend on apache-airflow (2 direct, 2 indirect)
Ecosystem-wide dependent count for version 3.0.0.
Description PRE-NVD
AnalysisAI
JWT session cookies in Apache Airflow's JWTRefreshMiddleware are set without the Secure flag when Airflow runs behind an HTTPS-terminating reverse proxy, exposing them to network interception. Affected versions span Apache Airflow 3.0.0 through 3.2.1 (exclusive), where the middleware checked only for a local ssl_cert configuration setting to determine cookie security - missing the common deployment pattern where TLS is offloaded at a load balancer or proxy layer. An unauthenticated network adversary positioned for man-in-the-middle interception could capture a user's JWT refresh cookie and take over their authenticated session. No public exploit code or CISA KEV listing exists at time of analysis; EPSS of 0.01% reflects low automated exploitation likelihood.
Technical ContextAI
The vulnerable component is JWTRefreshMiddleware in airflow-core/src/airflow/api_fastapi/auth/middlewares/refresh_token.py, part of Airflow's FastAPI-based REST API surface. The middleware issues a refreshed JWT cookie on authenticated requests; the secure attribute of that Set-Cookie header was computed solely as bool(conf.get('api', 'ssl_cert', fallback='')). In standard reverse-proxy deployments (nginx, AWS ALB, GCP Load Balancer), TLS terminates at the proxy, and Airflow receives plain HTTP internally - so ssl_cert is typically unconfigured. CWE-614 (Sensitive Cookie in HTTPS Session Without 'Secure' Attribute) directly describes this class: absent the Secure flag, browsers will transmit the cookie on any HTTP request, not just HTTPS, allowing interception. The fix in PR #65348 augments the condition to also check request.base_url.scheme == 'https', which is populated from forwarded headers by the proxy. CPE cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:* confirms the affected artifact is the Apache Airflow core package.
RemediationAI
Vendor-released patch: Apache Airflow 3.2.2, which incorporates the fix from GitHub PR #65348 (https://github.com/apache/airflow/pull/65348). Upgrading to 3.2.2 or later is the recommended and definitive remediation. As a compensating control for operators who cannot immediately upgrade, configuring the ssl_cert setting under the [api] section of airflow.cfg to a valid certificate path will trigger the secure flag even in the buggy code path - though this may require Airflow to handle TLS directly, altering the deployment architecture. Alternatively, ensuring all user-facing paths strictly enforce HTTPS with HSTS headers at the proxy layer (preventing browser fallback to HTTP) reduces the practical window for cookie interception. Neither compensating control fully resolves the root cause; upgrade to 3.2.2 is the only complete fix. Advisory references: https://lists.apache.org/thread/9jx0sk49c1250zflx0q3clc717qgjdch and https://vuldb.com/vuln/367558.
The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but th
An issue was found in Apache Airflow versions 1.10.10 and below. Rated high severity (CVSS 8.8), this vulnerability is r
The variable import endpoint was not protected by authentication in Airflow >=2.0.0, <2.1.3. Rated critical severity (CV
An issue was found in Apache Airflow versions 1.10.10 and below. Rated critical severity (CVSS 9.8), this vulnerability
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arb
In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a maliciou
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.6.0. Rated critical severit
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Fou
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airfl
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixa
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today