CVE-2022-40954 json
Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files
published 2022-11-22 3 y ago modified 2026-09-08 2 mo ago also BIT-airflow-2022-40954 , EUVD-2022-7224 , GHSA-45r6-j3cc-6mxx , PYSEC-2026-770
- cvss
- 5.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.4%
- EPSS 1.4% chance of exploitation in 30 days, percentile 72%
- public exploits
- 0
- none known
Summary
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider versions prior to 4.0.0. It also impacts any Apache Airflow versions prior to 2.3.0 in case Spark Provider is installed (Spark Provider 4.0.0 can only be installed for Airflow 2.3.0+). Note that you need to manually install the Spark Provider version 4.0.0 in order to get rid of the vulnerability on top of Airflow 2.3.0+ version that has lower version of the Spark Provider installed).
Patch / fix
- pypi apache-airflow 2.3.0
- bitnami airflow 2.3.0
- Apache Software Foundation Apache Airflow Spark Provider 4.0.0
- Apache Software Foundation Apache Airflow 2.3.0
- github.com/apache/airflow#27646 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 18 mo ago
Exploit prediction
1.39% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CNA | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow | <2.3.0 |
2.3.0 |
| bitnami | airflow | <2.3.0 |
2.3.0 |
Affected products
- Apache Software Foundation Apache Airflow Spark Provider
- Apache Software Foundation Apache Airflow
Classification
- Weakness
-
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
-
github.com
/apache/airflow/pull/27646
web, patch, third-party-advisory, advisory
-
lists.apache.org
/thread/0tmdlnmjs5t4gsx5fy73tb6zd3jztq45
web, mailing-list, vendor-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2022-40954
advisory, web
-
github.com
/apache/airflow
package
-
pypi.org
/project/apache-airflow
package
-
github.com
/advisories/GHSA-45r6-j3cc-6mxx
advisory
Sources
- CVE List CVE-2022-40954
- GitHub Advisory GHSA-45r6-j3cc-6mxx
- NVD CVE-2022-40954
- OSV BIT-airflow-2022-40954
- OSV PYSEC-2026-770
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.