Docker Provider <3.0 RCE vulnerability in example dag
Priority MEDIUM 42Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.
Summary
Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.
Why it matters now
EPSS 0.01953 80th percentileScored 2026-11-07
Fix Fixed Apache Airflow (Apache Software Foundation): 3.0.0apache-airflow-providers-docker (PyPI): 3.0.0
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Apache | Apache Airflow | Apache Airflow Docker Provider to before 3.0.0 | 3.0.0 | Patch available | CNA |
| — | apache-airflow-providers-docker (PyPI) | before 3.0.0 | 3.0.0 | Patch available | GHSA-746v-hfh2-xphm |
- Apache Airflow VendorApache Affected Apache Airflow Docker Provider to before 3.0.0 Fixed in 3.0.0 Patch available CNA
- apache-airflow-providers-docker (PyPI) Vendor— Affected before 3.0.0 Fixed in 3.0.0 Patch available GHSA-746v-hfh2-xphm
Remediation
- Fix · CNA Apache Airflow (Apache Software Foundation) Fixed in 3.0.0
- Fix · GHSA-746v-hfh2-xphm apache-airflow-providers-docker (PyPI) Fixed in 3.0.0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2022-38362
- 2026-10-03 Alias added: GHSA-746v-hfh2-xphm
References
Sources
- CVE-2022-38362 · CVE Program
- CVE-2022-38362 · NVD
- FIRST EPSS
- GHSA-746v-hfh2-xphm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences