CVE-2025-66388 json
Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI
published 2025-12-15 10 mo ago modified 2026-11-03 6 d ago also BIT-airflow-2025-66388 , EUVD-2025-203358 , GHSA-fv47-pqh6-wxgq , PYSEC-2025-86
- cvss
- 4.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 41%
- public exploits
- 0
- none known
Summary
A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization.
Users are recommended to upgrade to version 3.1.4, which fixes this issue.
Patch / fix
- pypi apache-airflow 3.1.4, 3.1.5
- bitnami airflow 3.1.4
- Apache Software Foundation Apache Airflow 3.1.4
- github.com/apache/airflow#58772 pull request
- github.com/apache/airflow#58767 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 10 mo ago
Exploit prediction
0.47% chance of exploitation in the next 30 days, higher than 41% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| GitHub | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CNA | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| OSV | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| OSV | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow | >=3.1.0, <3.1.5 >=3.1.0, <3.1.4 |
3.1.5 3.1.4 |
| bitnami | airflow | >=3.1.0, <3.1.4 |
3.1.4 |
Affected products
- Apache Software Foundation Apache Airflow
Classification
- Weakness
-
- CWE-201 Insertion of Sensitive Information Into Sent Data
References
-
github.com
/apache/airflow/pull/58772
patch, web, issue-tracking, report
-
github.com
/apache/airflow/pull/58767
web
-
lists.apache.org
/thread/mv9hzsx8grjf7gdlkxwppnpbtogtls2g
vendor-advisory, web, mailing-list, advisory
-
openwall.com
/lists/oss-security/2025/12/12/1
web, mailing-list, third-party-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2025-66388
advisory, web
-
github.com
/apache/airflow
package
-
github.com
/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2025-86.yaml
web
-
github.com
/advisories/GHSA-fv47-pqh6-wxgq
advisory
Sources
- CVE List CVE-2025-66388
- GitHub Advisory GHSA-fv47-pqh6-wxgq
- NVD CVE-2025-66388
- OSV BIT-airflow-2025-66388
- OSV PYSEC-2025-86
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.