CVE-2022-38649 json
Apache Airflow Pinot provider allowed Command Injection
published 2022-11-22 3 y ago modified 2026-10-26 13 d ago also BIT-airflow-2022-38649 , EUVD-2022-7272 , GHSA-7wqf-h36w-47mc , PYSEC-2026-267
- cvss
- 9.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.4%
- EPSS 3.4% chance of exploitation in 30 days, percentile 88%
- public exploits
- 0
- none known
Summary
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Apache Airflow Pinot Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Apache Airflow Pinot Provider is installed (Apache Airflow Pinot Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Pinot Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version.
Patch / fix
- pypi apache-airflow 2.3.0
- bitnami airflow 2.3.0
- Apache Software Foundation Apache Airflow Pinot Provider 4.0.0
- Apache Software Foundation Apache Airflow 2.3.0
- github.com/apache/airflow@1d4fd5c commit
- github.com/apache/airflow#27641 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 18 mo ago
Exploit prediction
3.40% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow | <2.3.0 |
2.3.0 |
| bitnami | airflow | <2.3.0 |
2.3.0 |
Affected products
- Apache Software Foundation Apache Airflow Pinot Provider
- Apache Software Foundation Apache Airflow
Classification
- Weakness
-
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
-
github.com
/apache/airflow/pull/27641
web, patch, third-party-advisory, advisory
-
github.com
/apache/airflow/commit/1d4fd5c6eacab0b88f8660f9d780174434393f1a
web
-
lists.apache.org
/thread/033o1gbc4ly6dpd2xf1o201v56fbl4dz
web, issue-tracking, mailing-list, vendor-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2022-38649
advisory, web
-
github.com
/apache/airflow
package
-
github.com
/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2026-267.yaml
web
-
pypi.org
/project/apache-airflow
web, package
-
github.com
/advisories/GHSA-7wqf-h36w-47mc
advisory
Sources
- CVE List CVE-2022-38649
- GitHub Advisory GHSA-7wqf-h36w-47mc
- NVD CVE-2022-38649
- OSV BIT-airflow-2022-38649
- OSV PYSEC-2026-267
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.