PT-2026-39578 · Apache Airflow · Apache Airflow Providers Elasticsearch
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
apache-airflow-providers-elasticsearch versions prior to 6.5.3
Description
The Elasticsearch logging provider writes the full host URL into task logs when configured with a
host URL that embeds credentials. This allows any user with task-log read permissions to harvest the backend credentials.Recommendations
Upgrade to version 6.5.3 or later.
Configure backend credentials via a secret backend instead of embedding them in the
host URL.Exploit
Fix
Insertion into Log File
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Airflow Providers Elasticsearch