CVE-2025-69219 json
Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator
published 2026-03-09 8 mo ago modified 2026-09-10 1 mo ago also GHSA-9r5j-7r2x-rv4g , PYSEC-2026-2367 , EUVD-2025-208401
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.8%
- EPSS 0.8% chance of exploitation in 30 days, percentile 55%
- public exploits
- 0
- none known
Summary
A user with access to the DB could craft a database entry that would result in executing code on Triggerer - which gives anyone who have access to DB the same permissions as Dag Author. Since direct DB access is not usual and recommended for Airflow, the likelihood of it making any damage is low.
You should upgrade to version 6.0.0 of the provider to avoid even that risk.
Patch / fix
- pypi apache-airflow-providers-http 6.0.0
- Apache Software Foundation Apache Airflow Providers Http 6.0.0
- github.com/apache/airflow@97839f7 commit
- github.com/apache/airflow#61662 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 8 mo ago
Exploit prediction
0.77% chance of exploitation in the next 30 days, higher than 55% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| OSV | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| GitHub | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow-providers-http | <6.0.0 |
6.0.0 |
Affected products
- Apache Software Foundation Apache Airflow Providers Http
Classification
- Weakness
-
- CWE-913 Improper Control of Dynamically-Managed Code Resources
References
-
github.com
/apache/airflow/pull/61662
patch, web, issue-tracking
-
github.com
/apache/airflow/commit/97839f7b0a8ae66d6079bb7fad5a363068f61617
web
-
lists.apache.org
/thread/zjkfb2njklro68tqzym092r4w65m5dq0
vendor-advisory, web, mailing-list
-
openwall.com
/lists/oss-security/2026/03/09/1
web, mailing-list, third-party-advisory
-
nvd.nist.gov
/vuln/detail/CVE-2025-69219
advisory
-
github.com
/apache/airflow
package
-
pypi.org
/project/apache-airflow-providers-http
package
-
github.com
/advisories/GHSA-9r5j-7r2x-rv4g
advisory
Sources
- CVE List CVE-2025-69219
- GitHub Advisory GHSA-9r5j-7r2x-rv4g
- NVD CVE-2025-69219
- OSV PYSEC-2026-2367
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.