CVE-2026-65017 json
Apache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)
published 2026-08-12 2 mo ago modified 2026-11-03 6 d ago also BIT-airflow-2026-65017 , EUVD-2026-57272 , GHSA-c56v-8w4g-3mfm , PYSEC-2026-3993
- cvss
- 6.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 33%
- public exploits
- 0
- none known
Summary
Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments. When an administrator has enabled multi-team mode and exposed the Config API, an authenticated Viewer holding only configuration-read access — with no prior access to the secret — could read a team-scoped Celery broker URL, including its embedded credentials, in cleartext, while the equivalent global option was correctly masked. The secrets masker matched only base section and option names and did not normalize team-prefixed sections before the sensitivity check (CWE-200). This is a distinct masker bypass from CVE-2026-48828 and CVE-2026-48892: deployments that upgraded to apache-airflow 3.3.0 to address those issues remain affected by this team-scoped variant. Users are advised to upgrade to apache-airflow 3.3.1 or later, which normalizes team-scoped sections before masking.
Patch / fix
- pypi apache-airflow 3.3.1
- bitnami airflow 3.3.1
- Apache Software Foundation Apache Airflow 3.3.1
- github.com/apache/airflow@62d37d5 commit
- github.com/apache/airflow@d41ac7b commit
- github.com/apache/airflow#70755 pull request
- github.com/apache/airflow/releases/tag/3.3.1 release
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2 mo ago
Exploit prediction
0.39% chance of exploitation in the next 30 days, higher than 33% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CNA | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow | >=3.3.0, <3.3.1 |
3.3.1 |
| bitnami | airflow | >=3.3.0, <3.3.1 |
3.3.1 |
Affected products
- Apache Software Foundation Apache Airflow
Classification
- Weakness
-
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References
-
github.com
/apache/airflow/pull/70755
patch, web, issue-tracking
-
github.com
/apache/airflow/commit/62d37d52bf4df38b6acd3a1e73203508878f36c4
web
-
github.com
/apache/airflow/commit/d41ac7b6d213682db3ef4d21bbb33e013dde4af4
web
-
lists.apache.org
/thread/kykn94kjf0tntx4wywtvjowh5bzdgf38
vendor-advisory, web, mailing-list, advisory
-
cve.org
/CVERecord?id=CVE-2026-48828
related, web, not-applicable
-
cve.org
/CVERecord?id=CVE-2026-48892
related, web, not-applicable
-
nvd.nist.gov
/vuln/detail/CVE-2026-65017
advisory, web
-
github.com
/apache/airflow
package
-
github.com
/apache/airflow/releases/tag/3.3.1
web
-
github.com
/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2026-3993.yaml
web
-
github.com
/advisories/GHSA-c56v-8w4g-3mfm
advisory
Sources
- CVE List CVE-2026-65017
- GitHub Advisory GHSA-c56v-8w4g-3mfm
- NVD CVE-2026-65017
- OSV BIT-airflow-2026-65017
- OSV PYSEC-2026-3993
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.