Apache Airflow Multiple Vulnerabilities Advisory

CERT-Bund has released security advisory WID-SEC-2026-0755 concerning multiple vulnerabilities in Apache Airflow, rated with a high CVSS base score of 8.6. The vulnerabilities affect Apache Airflow versions prior to 3.1.8 and can be exploited by remote attackers to bypass security measures and disclose information. The advisory applies to Linux and UNIX operating systems.

Organizations using affected versions of Apache Airflow should update to version 3.1.8 or later to mitigate these risks. While no specific compliance deadline is mentioned, prompt patching is recommended to prevent potential security breaches and data compromise. Failure to address these vulnerabilities could expose systems to unauthorized access and data exfiltration.