-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from three key points: 1) KubernetesPodOperator's convert_config_file_to_dict serialized sensitive config files into plaintext metadata, 2) Triggerer service logged full trigger payloads containing these credentials, and 3) Trigger serialization stored parameters without encryption. PR #29498 shows the config file handling, PR #30110 addresses logging exposure, and PR #36492 implements encryption - all confirming these functions' roles in the vulnerability chain.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| apache-airflow | pip | >= 2.3.0, < 2.6.1 | 2.6.1 |
| apache-airflow-providers-cncf-kubernetes | pip | >= 5.2.0, < 7.0.0 | 7.0.0 |