Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-27173
Awaiting Analysis
More InfoOfficial Page
Source-security@apache.org
View Known Exploited Vulnerability (KEV) details
Published At-19 May, 2026 | 20:16
Updated At-19 May, 2026 | 21:16

JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only access to perform actions that were only available to running tasks via Task SDK and potentially allow to modify state of Airflow Database for tasks.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.18.7HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Type: Secondary
Version: 3.1
Base score: 8.7
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
CPE Matches

Weaknesses
CWE IDTypeSource
CWE-538Secondarysecurity@apache.org
CWE ID: CWE-538
Type: Secondary
Source: security@apache.org
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/apache/airflow/pull/60108security@apache.org
N/A
https://lists.apache.org/thread/pk3m2z4s2rkmc0v6gh9hnch9spc6stqwsecurity@apache.org
N/A
http://www.openwall.com/lists/oss-security/2026/05/19/35af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: https://github.com/apache/airflow/pull/60108
Source: security@apache.org
Resource: N/A
Hyperlink: https://lists.apache.org/thread/pk3m2z4s2rkmc0v6gh9hnch9spc6stqw
Source: security@apache.org
Resource: N/A
Hyperlink: http://www.openwall.com/lists/oss-security/2026/05/19/35
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found

Details not found