Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 10:21:43 +0000 CVE-2026-30911 — Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization https://cve.radiocsirt.org/vuln/cve-2026-30911 <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API&#39;s Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API&#39;s Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/cve-2026-30911 GHSA-8x34-9q3v-h7g8 — Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization https://cve.radiocsirt.org/vuln/ghsa-8x34-9q3v-h7g8 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API&#39;s Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API&#39;s Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve, or reject HITL workflows belonging to any other task instance.</p> <p>Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-8x34-9q3v-h7g8