Vulnerabilities

TI-2025-42165 CVE-2025-68675 · GHSA-7c2f-r6gc-h92h

Apache Airflow: proxy credentials for various providers might leak in task logs

MEDIUM 43

In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01879 Published 2026-01-16 Fixed in 2.11.1, 3.1.6 CWE-532

TI-2025-41986 CVE-2025-68438 · GHSA-3qmm-r55x-hpxx

Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated

MEDIUM 40

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartext in the Rendered Templates UI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2026-01-16 Fixed in 3.1.6 CWE-200

Vulnerabilities

Filters

Apache Airflow: proxy credentials for various providers might leak in task logs

Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated