description: In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
problem types: Remote code execution (RCE)
affected:
{
product: Apache Airflow
vendor: Apache Software Foundation
versions:
status: affected, version: Apache Airflow <= 1.8.2
}