Apache Airflow Cncf Kubernetes Provider
Monthly
Privilege escalation in the Apache Airflow CNCF Kubernetes provider (versions before 10.17.0) exposes worker JWT tokens to any principal holding read-only access to Kubernetes Pods. When Airflow runs with the KubernetesExecutor, the scheduler embeds a 'workload'-scoped Execution API JWT in the pod's workload payload, so a low-privileged user who can read pod objects can harvest that token and impersonate a running task via the Task SDK, including actions that mutate Airflow database state. There is no public exploit identified at time of analysis; EPSS is 0.01% (2nd percentile) and CISA SSVC rates exploitation as none, so this is an insider/lateral-movement risk rather than a mass-exploited flaw.
Privilege escalation in the Apache Airflow CNCF Kubernetes provider (versions before 10.17.0) exposes worker JWT tokens to any principal holding read-only access to Kubernetes Pods. When Airflow runs with the KubernetesExecutor, the scheduler embeds a 'workload'-scoped Execution API JWT in the pod's workload payload, so a low-privileged user who can read pod objects can harvest that token and impersonate a running task via the Task SDK, including actions that mutate Airflow database state. There is no public exploit identified at time of analysis; EPSS is 0.01% (2nd percentile) and CISA SSVC rates exploitation as none, so this is an insider/lateral-movement risk rather than a mass-exploited flaw.