https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:49:06.312403+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-airflow-2026-30898 BIT-airflow-2026-30898 — Apache Airflow: Bad example of BashOperator shell injection via dag_run.conf 2026-10-05T12:49:06.315324+00:00

Affected: Bitnami: airflow

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

 https://cve.radiocsirt.org/vuln/euvd-2026-292330 EUVD-2026-292330 2026-10-05T12:49:06.315383+00:00 EUVD-2026-292330 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30898 fkie_cve-2026-30898 2026-10-05T12:49:06.315401+00:00

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

 https://cve.radiocsirt.org/vuln/ghsa-6337-2587-f2jq GHSA-6337-2587-f2jq 2026-10-05T12:49:06.315424+00:00

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1168 WID-SEC-W-2026-1168 — Apache Airflow und Apache Airflow Keycloak Provider: Mehrere Schwachstellen 2026-10-05T12:49:06.315440+00:00

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Airflow und dem Airflow Keycloak Provider ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.