https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T17:04:36.922828+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-45034 CVE-2024-45034 — Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes 2026-10-10T17:04:36.924596+00:00

Affected: Apache Software Foundation Apache Airflow, apache airflow

Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG folder and get it executed by the scheduler, where the scheduler is not supposed to execute code submitted by the DAG author. Users are advised to upgrade to version 2.10.1 or later, which has fixed the vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-92xg-gmrq-5c3w GHSA-92xg-gmrq-5c3w — Apache Airflow vulnerable to Execution with Unnecessary Privileges 2026-10-10T17:04:36.924656+00:00

Affected: PyPI: apache-airflow

Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG folder and get it executed by the scheduler, where the scheduler is not supposed to execute code submitted by the DAG author. Users are advised to upgrade to version 2.10.1 or later, which has fixed the vulnerability.