Apache Airflow Flaws Expose Sensitive Workflow Data to Potential Attackers
ID: cd3d249d-37dd-513f-ae64-aa65dc6a7a60
STIX ID: report--cd3d249d-37dd-513f-ae64-aa65dc6a7a60
Feed Name: GBHackers
Threat Score
**Apache Airflow credential-exposure vulnerabilities (CVE-2025-68675, CVE-2025-68438) were disclosed and patched in 3.1.6; flaws allowed proxy credentials and other secrets to be logged or rendered in the web UI, requiring log or UI access to exploit — organizations should upgrade immediately, restrict log/UI access, rotate exposed credentials, and implement redaction.**
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.