Apache Airflow v3 Default Login

披露于 2025/07/09 · 更新于 2026/01/12

CVSS 评分8.3/ 10.0

EPSS 概率—利用概率预测

漏洞描述

Apache Airflow v3 default login credentials were discovered.

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

RELATED INTELLIGENCE

与 airflow 相关的其他公开漏洞。

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
unauthenticated_airflow_instanceRCE Unauthenticated Airflow Instance airflow	高危	—	—	PoCEXP	2024/01/15
airflow_debug Airflow Debug Trace airflow	低危	—	—	PoCEXP	2024/01/15
airflow_default_loginRCE Apache Airflow Default Login airflow	高危	8.3	—	PoCEXP	2023/11/27
airflow_configuration_exposure Apache Airflow Configuration Page - Detect airflow	中危	5.3	—	PoCEXP	2023/10/20
CVE-2022-40127 AirFlow < 2.4.0 - Remote Code Execution airflow	高危	8.8	93.8%	PoCEXP	2022/11/15
CVE-2022-24288RCE Apache Airflow OS Command Injection airflow	高危	8.8	91.8%	PoCEXP	2022/02/25