CVE-2026-31987: Apache Airflow: JWT token appearing in logs
JWT Tokens used by tasks were exposed in logs. This could allow UI users to act as Dag Authors. Users are advised to upgrade to Airflow version that contains fix.
Users are recommended to upgrade to version 3.2.0, which fixes this issue.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31987?
CVE-2026-31987 is a moderate severity vulnerability due to JWT tokens being logged, which could expose sensitive information.
How do I fix CVE-2026-31987?
To fix CVE-2026-31987, users should upgrade to Apache Airflow version 3.2.0 or later.
What type of data is exposed in CVE-2026-31987?
CVE-2026-31987 exposes JWT tokens in logs, potentially allowing unauthorized access as Dag Authors.
Who is affected by CVE-2026-31987?
Users of Apache Airflow versions prior to 3.2.0 are affected by CVE-2026-31987.
Can logging settings mitigate CVE-2026-31987?
Changing logging settings may reduce exposure, but upgrading to version 3.2.0 is the recommended mitigation for CVE-2026-31987.