Dashboard / CVE-2026-30898

CVE-2026-30898

HIGH
MEDIUM Priority: 0.07 BB Relevance: 68/100
Published: 2026-04-18 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate privileges of UI user to allow execute code on worker. Users should review if any of their own DAGs have adopted this incorrect advice.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
apache airflow < 3.2.0

References & Advisories (3)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.77%
Raw Score 0.007710
Percentile 55.6%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00771
2026-10-28
0.00771

Intelligence Sources

nvd ref →

External Links