CVE-2023-25754: Apache Airflow

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.

Affected products

• Apache Airflow: before 2.6.0 (fixed in 2.6.0)

Published 2023-05-08. Last modified 2026-06-17.