EUVD-2026-33598
GHSA-89cj-xrpx-j79m
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
6Blast Radius
ecosystem impact- 8 pypi packages depend on apache-airflow (4 direct, 4 indirect)
Ecosystem-wide dependent count for version 3.2.2.
Description PRE-NVD
AnalysisAI
Arbitrary file read in Apache Airflow's FileTaskHandler allows authenticated users to read files outside the designated log directory by placing symlinks within the log folder tree. Versions prior to 3.2.2 are affected. Because FileTaskHandler._read_from_local() resolved glob matches without first verifying that a symlink's real path stays within the configured base log folder, a low-privileged Airflow user could exfiltrate sensitive server-side files - credentials, keys, or configuration - by directing log reads through a crafted symlink. No public exploit code exists and the vulnerability is not in CISA KEV, though the CVSS C:H rating reflects genuine confidentiality risk.
Technical ContextAI
Apache Airflow's FileTaskHandler (airflow-core/src/airflow/utils/log/file_task_handler.py) is responsible for writing and reading task execution logs to a configured base_log_folder on disk. The _read_from_local() method uses a glob pattern to discover log files associated with a task instance and opens each matching path directly. Prior to 3.2.2, the code called open(path) on raw glob results without resolving symlinks or validating path containment, a classic CWE-59 (Improper Link Resolution Before File Access - 'Link Following') defect. An attacker-controlled symlink matching the glob pattern (e.g., '1.log.external') inside a log subdirectory could point anywhere on the filesystem. The fix in PR #65325 introduces os.path.realpath() on both the base log folder and each glob hit, then uses os.path.commonpath() to enforce containment - rejecting any resolved path whose canonical form does not begin with the canonical base_log_folder. The affected CPE range is Apache Airflow 0 through < 3.2.2 per EUVD-2026-33598.
RemediationAI
Upgrade Apache Airflow to version 3.2.2 or later, which contains the upstream fix from PR #65325 (https://github.com/apache/airflow/pull/65325). The fix is a path-containment enforcement change in FileTaskHandler._read_from_local() requiring no configuration changes post-upgrade. If an immediate upgrade is not feasible, restrict the ability of non-administrative Airflow users to write files or create symlinks within the Airflow log directory (base_log_folder) at the filesystem level using OS permissions (e.g., chmod 755 on log parent directories, ensuring only the airflow service account can write). This compensating control eliminates the attacker's ability to plant the malicious symlink, though it trades off against DAG-authored log customisation features. Alternatively, switching to a remote log backend (S3, GCS, Azure Blob) removes the local FileTaskHandler entirely and eliminates this vulnerability surface. Vendor advisory thread: https://lists.apache.org/thread/823334db2559xjlwt59gpzjz47thnscl.
More in Open Redirect
View allA malicious third-party can give a crafted "ssh://..." URL to an unsuspecting victim, and an attempt to visit the URL ca
GFI Kerio Control versions 9.2.5 through 9.4.5 contain an HTTP response splitting vulnerability in the dest parameter of
PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect
Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to
Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 b
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (li
Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3
Flarum is open source discussion platform software. Rated medium severity (CVSS 6.5), this vulnerability is remotely exp
Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites
Open redirect vulnerability in the Redirect function in stageshow_redirect.php in the StageShow plugin before 5.0.9 for
Nteract v.0.28.0 was discovered to contain a remote code execution (RCE) vulnerability via the Markdown link. Rated crit
Same weakness CWE-59 – Improper Link Resolution Before File Access
View allShare
External POC / Exploit Code
Leaving vuln.today