CVE-2026-45192— Apache Airflow 连接API敏感字段未完整隐藏漏洞
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud Storage新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-45192の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Apache Airflow: Incomplete Redaction of Sensitive Fields in Connection Extra API Response
ソース: NVD (National Vulnerability Database)
脆弱性説明
A bug in the GET `/api/v2/connections/{connection_id}` REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's `extra` JSON blob under field names not present in the redaction allowlist (`DEFAULT_SENSITIVE_FIELDS`) — for example, official Slack-provider credential field names were returned in plaintext. Affects deployments that store credentials in Connection `extra` blobs and grant Connection-read access to multiple users. Users are advised to upgrade to `apache-airflow` 3.2.2 or later. As a defense-in-depth mitigation, deployment operators can store sensitive credential values in a secret-backend rather than inlined into the Connection's `extra` field.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
信息暴露
ソース: NVD (National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Apache Software Foundation | Apache Airflow | 0 ~ 3.2.2 | - |
II. CVE-2026-45192の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-45192のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-45192 补丁与修复 (1)
CVE-2026-45192 邮件列表归档 (1)
Same Patch Batch · Apache Software Foundation · 2026-06-01 · 28 CVEs total
| CVE-2026-44825 | 8.1 HIGH | Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users |
| CVE-2026-48827 | 7.1 HIGH | Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git |
| CVE-2026-35563 | Apache Directory LDAP API: LDAP client implementation does not verify if the server certif | |
| CVE-2026-49328 | Apache Fesod (Incubating): Improper validation of user-supplied URLs leading to SSRF | |
| CVE-2026-49270 | Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All: Durable Subscription Disclos | |
| CVE-2026-49157 | Apache ActiveMQ: Authenticated low-privilege Web users retain Jolokia broker-management ca | |
| CVE-2026-46605 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incomplete authorization dur | |
| CVE-2026-45505 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Jolokia `addNetworkConnector | |
| CVE-2026-42588 | Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Remote Code Execution via Jo | |
| CVE-2026-42253 | Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Prope | |
| CVE-2026-49298 | Apache Airflow: JWT Token Exposure in KubernetesExecutor Command-Line Arguments | |
| CVE-2026-48726 | Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout | |
| CVE-2026-46764 | Apache Airflow: Event Log detail endpoint bypasses DAG-scoped event log permission filter | |
| CVE-2026-45426 | Apache Airflow: Log server JWT authorization bypass via Python lstrip() character strippin | |
| CVE-2026-45360 | Apache Airflow: Arbitrary import in custom deadline-reference deserialization | |
| CVE-2026-42359 | Apache Airflow: Authenticated RCE via XCom PATCH endpoint — XComUpdateBody missing FORBIDD | |
| CVE-2026-42358 | Apache Airflow: Variable masker depth-limit bypass returns cleartext nested secrets | |
| CVE-2026-42360 | Apache Airflow: Rendered template truncation bypasses nested sensitive-key masking | |
| CVE-2026-42252 | Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user patter | |
| CVE-2026-41084 | Apache Airflow: API authorization bypass: bulk TaskInstances allows cross-DAG mutation |
Showing 20 of 28 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Apache Airflow
- CVE-2026-40861
Apache Airflow: Arbitrary File Read via Log Symlink followin - CVE-2026-40961
Apache Airflow: Open Redirect Bypass Vulnerability - CVE-2026-40963
Apache Airflow: DAG authorization bypass on /ui/structure/st - CVE-2026-41014
Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_r - CVE-2026-49267
Apache Airflow: No certificate validation on SMTP STARTTLS c
同じベンダー: Apache Software Foundation
- CVE-2026-49328
Apache Fesod (Incubating): Improper validation of user-suppl - CVE-2026-48827
Apache MINA SSHD: Path traversal in org.apache.sshd:sshd-git - CVE-2026-44825
Apache Solr: Enabling BasicAuth using bin/solr CLI configure - CVE-2026-49361
Apache Fluss Netty Frame Decoder Memory Exhaustion Vulnerabi - CVE-2026-40861
Apache Airflow: Arbitrary File Read via Log Symlink followin
同じ弱点: CWE-200
- CVE-2026-42360
Apache Airflow: Rendered template truncation bypasses nested - CVE-2026-42358
Apache Airflow: Variable masker depth-limit bypass returns c - CVE-2026-48189
Bypass DedicatedAgentToCustomerGroups Setting - CVE-2026-48210
Possible information disclosure via External Interface - CVE-2026-2128
Breeze Cache <= 2.5.2 - Unauthenticated Exposure of Sensitiv
V. CVE-2026-45192へのコメント
まだコメントはありません