title: Docker Provider <3.0 RCE vulnerability in example dag
description: Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.
problem types: Remote Code Execution
affected:
{
product: Apache Airflow
vendor: Apache Software Foundation
versions:
lessThan: 3.0.0, status: affected, version: Apache Airflow Docker Provider, versionType: custom
}
workarounds: Disable loading of example DAGs or upgrade the apache-airflow-providers-docker to 3.0.0 or above