CVE-2024-27906

—

CVSS 3.1

5.9 medium

EPSS

<1%p28

Published

Feb 29, 2024 (Feb 29, 2024)

Modified

Jun 17, 2026

Description

Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI. Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability

Vendors: apache
Products: airflow
Weakness: CWE-862
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.