Detections
Analytics
SCA: security update for apache-airflow (GHSA-r837-hpv7-pc2f)
high Tenable Cloud Security Plugin ID 438083
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way
to execute arbitrary code in the web-server context, which they should normally not be able to do, leading
to potentially remote code execution in the context of web-server (server-side) as a result of a user
viewing historical task information. The functionality responsible for that (log template history) has
been disabled by default in 2.11.1 and users should upgrade to Airflow 3 if they want to continue to use
log template history. They can also manually modify historical log file names if they want to see
historical logs that were generated before the last log template change. (CVE-2024-56373)
See Also
Plugin Details
Severity: High
ID: 438083
Version: Revision 1.5
Type: Local
Family: SCA Checks
Published: 3/3/2026
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 94.39
Vendor
Vendor Severity: High
CVSS v2
Risk Factor: High
Base Score: 8.3
Temporal Score: 6.1
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C
CVSS Score Source: CVE-2024-56373
CVSS v3
Risk Factor: High
Base Score: 8.4
Temporal Score: 7.3
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 2/24/2026
Vulnerability Publication Date: 2/24/2026
Reference Information
CVE: CVE-2024-56373
cwe: CWE-94