6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-66388

CVE-2025-66388: Apache Airflow exposes secret values to authenticated UI users via rendered templates

A vulnerability in Apache Airflow allowed authenticated UI users to view secret values in rendered templates due to secrets not being properly redacted, potentially exposing secrets to users without the appropriate authorization.

Users are recommended to upgrade to version 3.1.4, which fixes this issue.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-66388

CVE-2025-66388:

6.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
apache-airflow	pip	>= 3.1.0, < 3.1.4	3.1.5

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in how Apache Airflow handles secrets within rendered template fields. When a DAG task uses a templated field that resolves to a secret value, that value was being exposed in the Airflow UI.

The root cause, as identified from the pull request discussions, is a discrepancy in how secret masking was applied. Secrets masked on the worker using mask_secret() were not being redacted in the 'Rendered Templates' UI view. This is because the secret patterns were registered with the worker's secret masker instance, but the UI relies on a different instance within the core Airflow application, which did not have access to the worker's patterns.

The analysis of the patches, specifically commit 1e294eeef6621183ba0f0d075a0b57350db25ff7, points to the _serialize_rendered_fields function in task-sdk/src/airflow/sdk/execution_time/task_runner.py as the source of the leak. The original code simply serialized the rendered fields without any redaction. The fix intercepts this process by explicitly calling redact() on each serialized field before it is sent from the task runner to the API server. This ensures that secrets are masked at the source (the worker) before being stored and potentially exposed in the UI. Therefore, _serialize_rendered_fields is the key vulnerable function that would be in the execution path when this vulnerability is triggered.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.