CVE-2024-56373 - Vulnerability Analysis

Overview

Apache Airflow 2 contains a remote code execution caused by DAG author manipulation of database in log template history, letting DAG authors execute arbitrary code in web-server context, exploit requires DAG author privileges.

Severity & Score

Impact

DAG authors can execute arbitrary code on the web server, potentially compromising the server and its data.

Mitigation

Upgrade to Airflow 3 or disable log template history as in version 2.11.1.

References

• https://github.com/apache/airflow/pull/61880
• https://lists.apache.org/thread/2vrmrhcht6g7cp5yjxpnrk2wtrncm6cy
• http://www.openwall.com/lists/oss-security/2026/02/23/3

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner