CVE-2025-27555: Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli
Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is limited to users with audit log access, it is recommended to upgrade to Airflow 2.11.1 or a later version, which addresses this issue. Users who previously used the CLI to set connections should manually delete entries with those connection sensitive values from the log table. This is similar but not the same issue as CVE-2024-50378
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27555?
CVE-2025-27555 is considered a moderate severity vulnerability due to the potential exposure of sensitive connection parameters to authenticated users with audit log access.
How do I fix CVE-2025-27555?
To fix CVE-2025-27555, upgrade Apache Airflow to version 2.11.1 or later.
Who is affected by CVE-2025-27555?
CVE-2025-27555 affects Apache Airflow versions prior to 2.11.1.
What type of information is vulnerable in CVE-2025-27555?
CVE-2025-27555 allows the exposure of sensitive connection secrets in audit logs.
Can CVE-2025-27555 be exploited without authentication?
No, CVE-2025-27555 requires authenticated users with specific access to exploit the vulnerability.