Apache Airflow Log Template History Vulnerability Leading to Remote Code Execution

A vulnerability in Apache Airflow versions prior to 2.11.1 allows DAG Authors to manipulate the database and execute arbitrary code in the web server context. This issue arises when a user views historical task information, potentially leading to remote code execution on the server side. The vulnerability is related to the log template history feature, which has been disabled by default in Airflow 2.11.1. Users who wish to continue using log template history should upgrade to Airflow 3 or manually adjust historical log file names to access logs generated before the last log template change.

Impact

Exploitation of this vulnerability could result in unauthorized code execution on the web server, with potential remote code execution implications.

Remediation

Users are advised to upgrade to Apache Airflow 3. If upgrading is not possible, historical log file names can be manually modified to access logs generated before the last log template change.