CVE-2026-101031: Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier

Q: Who is exposed to this issue?

Deployments with example Dags enabled are exposed if the example_dag_decorator Dag is loaded. Production deployments are specifically advised to disable example Dags by setting load_examples = False.

Q: What does an attacker need to exploit it?

An attacker needs to be able to trigger the example Dag with a custom url parameter and direct it to a server they control. That server must return an IP address value containing an IPv6 zone identifier crafted to inject shell commands.

Q: Are systems upgraded for CVE-2025-54941 protected?

No. This issue is described as an incomplete fix for CVE-2025-54941, so users who upgraded for that CVE need to upgrade again.

Q: What should be done if upgrading is not immediately possible?

Disable example Dags by setting load_examples = False. This prevents the affected example Dag from being loaded and is recommended for production.

Published Nov 9, 2026

Updated

The exampledagdecorator example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with Python's ipaddress module and then placed it into a shell command. ipaddress accepts IPv6 zone identifiers containing arbitrary characters, so when example Dags are loaded (loadexamples enabled), a user who can trigger that Dag with a custom url parameter could point it at a server whose response injects shell commands run on the worker. This is an incomplete fix for CVE-2025-54941; users who upgraded for CVE-2025-54941 should upgrade again. Users are advised to upgrade to apache-airflow 3.4.0 or later, or to disable example Dags (loadexamples = False), which is recommended for production.

Affected Software

1 affected component

pypi/apache-airflow<3.4.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade apache-airflow to a version that resolves this vulnerability.
Fixed in 3.4.0
Configuration
Disable example DAGs by setting load_examples = False; this is recommended for production.
Apache Airflow load_examples = False

Event History

Nov 9, 2026

CVE Published

via MITRE·09:44 AM

Data Sourced

via MITRE·09:44 AM

DescriptionWeakness

Data Sourced

via NVD·10:17 AM

DescriptionWeakness

Frequently Asked Questions

Who is exposed to this issue?

Deployments with example Dags enabled are exposed if the example_dag_decorator Dag is loaded. Production deployments are specifically advised to disable example Dags by setting load_examples = False.

What does an attacker need to exploit it?

An attacker needs to be able to trigger the example Dag with a custom url parameter and direct it to a server they control. That server must return an IP address value containing an IPv6 zone identifier crafted to inject shell commands.

Are systems upgraded for CVE-2025-54941 protected?

No. This issue is described as an incomplete fix for CVE-2025-54941, so users who upgraded for that CVE need to upgrade again.

What should be done if upgrading is not immediately possible?

Disable example Dags by setting load_examples = False. This prevents the affected example Dag from being loaded and is recommended for production.

CVE-2026-101031: Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are systems upgraded for CVE-2025-54941 protected?

What should be done if upgrading is not immediately possible?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Are systems upgraded for CVE-2025-54941 protected?

What should be done if upgrading is not immediately possible?