Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see. When sensitive connection parameters were set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in the Airflow database. While this risk is limited to users with audit log access, it is recommended to upgrade to Airflow 2.11.1 or a later version, which addresses this issue. Users who previously used the CLI to set connections should manually delete entries with those connection sensitive values from the log table. This is similar but not the same issue as CVE-2024-50378

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Airflow versions before 2.11.1 have a vulnerability that allows authenticated users with audit log access
    to see sensitive values in audit logs which they should not see. When sensitive connection parameters were
    set via airflow CLI, values of those variables appeared in the audit log and were stored unencrypted in
    the Airflow database. While this risk is limited to users with audit log access, it is recommended to
    upgrade to Airflow 2.11.1 or a later version, which addresses this issue. Users who previously used the
    CLI to set connections should manually delete entries with those connection sensitive values from the log
    table. This is similar but not the same issue as CVE-2024-50378 (CVE-2025-27555)

ID	Name	Product	Family	Type	Severity
459471	Echo: apache-airflow: security update to 2.11.1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
459471	Echo: apache-airflow: security update to 2.11.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
438011	SCA: security update for apache-airflow (GHSA-8r55-rv5w-6pfm)	Tenable Cloud Security	SCA Checks	Local	medium
438011	SCA: security update for apache-airflow (GHSA-8r55-rv5w-6pfm)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2025-27555

medium

Tenable Plugins

medium

medium

medium

medium