CVE-2025-54831

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-54831
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54831.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-54831
Aliases
Published
2025-09-26T07:28:59.066Z
Modified
2026-07-15T01:49:03.847150678Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
Apache Airflow: Connection sensitive details exposed to users with READ permissions
Details

Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values.

In Airflow 3.0.3, this model was unintentionally violated: sensitive connection information could be viewed by users with READ permissions through both the API and the UI. This behavior also bypassed the AIRFLOW__CORE__HIDE_SENSITIVE_VAR_CONN_FIELDS configuration option.

This issue does not affect Airflow 2.x, where exposing sensitive information to connection editors was the intended and documented behavior.

Users of Airflow 3.0.3 are advised to upgrade Airflow to >=3.0.4.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54831.json",
    "cna_assigner": "apache",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "3.0.3"
                },
                {
                    "last_affected": "3.0.3"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-213"
    ]
}
References

Affected packages

Git / github.com/apache/airflow

Affected ranges

Type
GIT
Repo
https://github.com/apache/airflow
Events
Introduced
d7dbfb7e26a50130d3550e781dc71a5fbcaeb3d2
Last affected
d7dbfb7e26a50130d3550e781dc71a5fbcaeb3d2
Database specific 
{
    "cpe": "cpe:2.3:a:apache:airflow:3.0.3:-:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "3.0.3-NA"
        },
        {
            "last_affected": "3.0.3-NA"
        }
    ]
}

Affected versions

3.*
3.0.3-NA
providers-airbyte/2.*
providers-airbyte/2.1.4
providers-airbyte/2.1.4rc1
providers-alibaba/1.*
providers-alibaba/1.1.1
providers-alibaba/1.1.1rc1
providers-amazon/3.*
providers-amazon/3.2.0
providers-amazon/3.2.0rc1
providers-apache-beam/3.*
providers-apache-beam/3.3.0
providers-apache-beam/3.3.0rc1
providers-apache-cassandra/2.*
providers-apache-cassandra/2.1.3
providers-apache-cassandra/2.1.3rc1
providers-apache-drill/1.*
providers-apache-drill/1.0.4
providers-apache-drill/1.0.4rc1
providers-apache-druid/2.*
providers-apache-druid/2.3.3
providers-apache-druid/2.3.3rc1
providers-apache-hdfs/2.*
providers-apache-hdfs/2.2.3
providers-apache-hdfs/2.2.3rc1
providers-apache-hive/2.*
providers-apache-hive/2.3.2
providers-apache-hive/2.3.2rc1
providers-apache-kylin/2.*
providers-apache-kylin/2.0.4
providers-apache-kylin/2.0.4rc1
providers-apache-livy/2.*
providers-apache-livy/2.2.2
providers-apache-livy/2.2.2rc1
providers-apache-pig/2.*
providers-apache-pig/2.0.4
providers-apache-pig/2.0.4rc1
providers-apache-pinot/2.*
providers-apache-pinot/2.0.4
providers-apache-pinot/2.0.4rc1
providers-apache-spark/2.*
providers-apache-spark/2.1.3
providers-apache-spark/2.1.3rc1
providers-apache-sqoop/2.*
providers-apache-sqoop/2.1.3
providers-apache-sqoop/2.1.3rc1
providers-asana/1.*
providers-asana/1.1.3
providers-asana/1.1.3rc1
providers-celery/2.*
providers-celery/2.1.3
providers-celery/2.1.3rc1
providers-cloudant/2.*
providers-cloudant/2.0.4
providers-cloudant/2.0.4rc1
providers-cncf-kubernetes/3.*
providers-cncf-kubernetes/3.1.2
providers-cncf-kubernetes/3.1.2rc1
providers-databricks/2.*
providers-databricks/2.5.0
providers-databricks/2.5.0rc1
providers-datadog/2.*
providers-datadog/2.0.4
providers-datadog/2.0.4rc1
providers-dbt-cloud/1.*
providers-dbt-cloud/1.0.2
providers-dbt-cloud/1.0.2rc1
providers-dingding/2.*
providers-dingding/2.0.4
providers-dingding/2.0.4rc1
providers-discord/2.*
providers-discord/2.0.4
providers-discord/2.0.4rc1
providers-docker/2.*
providers-docker/2.5.2
providers-docker/2.5.2rc1
providers-elasticsearch/3.*
providers-elasticsearch/3.0.2
providers-elasticsearch/3.0.2rc1
providers-exasol/2.*
providers-exasol/2.1.3
providers-exasol/2.1.3rc1
providers-facebook/2.*
providers-facebook/2.2.3
providers-facebook/2.2.3rc1
providers-ftp/2.*
providers-ftp/2.1.2
providers-ftp/2.1.2rc1
providers-github/1.*
providers-github/1.0.3
providers-github/1.0.3rc1
providers-google/6.*
providers-google/6.7.0
providers-google/6.7.0rc1
providers-grpc/2.*
providers-grpc/2.0.4
providers-grpc/2.0.4rc1
providers-hashicorp/2.*
providers-hashicorp/2.1.4
providers-hashicorp/2.1.4rc1
providers-http/2.*
providers-http/2.1.2
providers-http/2.1.2rc1
providers-imap/2.*
providers-imap/2.2.3
providers-imap/2.2.3rc1
providers-influxdb/1.*
providers-influxdb/1.1.3
providers-influxdb/1.1.3rc1
providers-jdbc/2.*
providers-jdbc/2.1.3
providers-jdbc/2.1.3rc1
providers-jenkins/2.*
providers-jenkins/2.0.7
providers-jenkins/2.0.7rc1
providers-jira/2.*
providers-jira/2.0.4
providers-jira/2.0.4rc1
providers-microsoft-azure/3.*
providers-microsoft-azure/3.7.2
providers-microsoft-azure/3.7.2rc1
providers-microsoft-mssql/2.*
providers-microsoft-mssql/2.1.3
providers-microsoft-mssql/2.1.3rc1
providers-microsoft-psrp/1.*
providers-microsoft-psrp/1.1.3
providers-microsoft-psrp/1.1.3rc1
providers-microsoft-winrm/2.*
providers-microsoft-winrm/2.0.5
providers-microsoft-winrm/2.0.5rc1
providers-mongo/2.*
providers-mongo/2.3.3
providers-mongo/2.3.3rc1
providers-mysql/2.*
providers-mysql/2.2.3
providers-mysql/2.2.3rc1
providers-neo4j/2.*
providers-neo4j/2.1.3
providers-neo4j/2.1.3rc1
providers-odbc/2.*
providers-odbc/2.0.4
providers-odbc/2.0.4rc1
providers-openfaas/2.*
providers-openfaas/2.0.3
providers-openfaas/2.0.3rc1
providers-opsgenie/3.*
providers-opsgenie/3.0.3
providers-opsgenie/3.0.3rc1
providers-oracle/2.*
providers-oracle/2.2.3
providers-oracle/2.2.3rc1
providers-pagerduty/2.*
providers-pagerduty/2.1.3
providers-pagerduty/2.1.3rc1
providers-papermill/2.*
providers-papermill/2.2.3
providers-papermill/2.2.3rc1
providers-plexus/2.*
providers-plexus/2.0.4
providers-plexus/2.0.4rc1
providers-postgres/4.*
providers-postgres/4.1.0
providers-postgres/4.1.0rc1
providers-presto/2.*
providers-presto/2.1.2
providers-presto/2.1.2rc1
providers-qubole/2.*
providers-qubole/2.1.3
providers-qubole/2.1.3rc1
providers-redis/2.*
providers-redis/2.0.4
providers-redis/2.0.4rc1
providers-salesforce/3.*
providers-salesforce/3.4.3
providers-salesforce/3.4.3rc1
providers-samba/3.*
providers-samba/3.0.4
providers-samba/3.0.4rc1
providers-segment/2.*
providers-segment/2.0.4
providers-segment/2.0.4rc1
providers-sendgrid/2.*
providers-sendgrid/2.0.4
providers-sendgrid/2.0.4rc1
providers-sftp/2.*
providers-sftp/2.5.2
providers-sftp/2.5.2rc1
providers-singularity/2.*
providers-singularity/2.0.4
providers-singularity/2.0.4rc1
providers-slack/4.*
providers-slack/4.2.3
providers-slack/4.2.3rc1
providers-snowflake/2.*
providers-snowflake/2.6.0
providers-snowflake/2.6.0rc1
providers-sqlite/2.*
providers-sqlite/2.1.3
providers-sqlite/2.1.3rc1
providers-ssh/2.*
providers-ssh/2.4.3
providers-ssh/2.4.3rc1
providers-tableau/2.*
providers-tableau/2.1.7
providers-tableau/2.1.7rc1
providers-telegram/2.*
providers-telegram/2.0.4
providers-telegram/2.0.4rc1
providers-trino/2.*
providers-trino/2.1.2
providers-trino/2.1.2rc1
providers-vertica/2.*
providers-vertica/2.1.3
providers-vertica/2.1.3rc1
providers-yandex/2.*
providers-yandex/2.2.3
providers-yandex/2.2.3rc1
providers-zendesk/3.*
providers-zendesk/3.0.3
providers-zendesk/3.0.3rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-54831.json"