# CVE-2025-66236: Apache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UI Status: published. Published: 2026-04-13. Updated: 2026-11-03. Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security model of Airflow. Some assumptions the Deployment Manager could make were not clear or explicit enough, even though Airflow's intentions and security model of Airflow did not suggest different assumptions. The overall security model [1], workload isolation [2], and JWT authentication details [3] are now described in more detail. Users concerned with role isolation and following the Airflow security model of Airflow are advised to upgrade to Airflow 3.2, where several security improvements have been implemented. They should also read and follow the relevant documents to make sure that their deployment is secure enough. It also clarifies that the Deployment Manager is ultimately responsible for securing your Airflow deployment. This had also been communicated via Airflow 3.2.0 Blog announcement [4]. [1] Security Model: https://airflow.apache.org/docs/apache-airflow/stable/security/jwt_token_authentication.html [2] Workload isolation: https://airflow.apache.org/docs/apache-airflow/stable/security/workload.html [3] JWT Token authentication: https://airflow.apache.org/docs/apache-airflow/stable/security/jwt_token_authentication.html [4] Airflow 3.2.0 Blog announcement: https://airflow.apache.org/blog/airflow-3.2.0/ Users are recommended to upgrade to version 3.2.0, which fixes this issue. ## Remediation - fix: The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches. (source: CNA: apache) — https://github.com/apache/airflow/pull/58662 ## Affected products and versions - Apache Software Foundation / Apache Airflow (apache-airflow-core): ≥ 3.0.0; < 3.2.0 (affected, semver). Source: CNA: apache ## Severity and prioritization - CVSS 3.1: 7.5 (high); CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; source: ADP: CISA-ADP - CISA KEV: No listing in collected sources - EPSS: 0.44% as of 2026-11-02; percentile 38.12% - SSVC: exploitation none; automatable yes; technical impact partial; source ADP: CISA-ADP - Weaknesses: CWE-532 ## Exploit evidence No exploit evidence in collected sources. This is not proof of no exploitation. ## References - https://github.com/apache/airflow/pull/58662 (CNA: apache; patch) - https://lists.apache.org/thread/g8fyy1tkmxkkfk7tx2v6h8mvwzpyykbo (CNA: apache; vendor-advisory) - http://www.openwall.com/lists/oss-security/2026/04/13/6 (ADP: CVE) ## Provenance - CNA: apache: https://www.cve.org/CVERecord?id=CVE-2025-66236; retrieved 2026-11-03; source updated 2026-11-03 - FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2025-66236; retrieved 2026-11-03; source updated Not reported Revision: 60864b09933f6f88e6275804353ecb2b3a17f7c48d2013a43974d381c0d6c877 Canonical: https://y2.dev/cve/CVE-2025-66236 ## Agent and API access Public CVE pages, Markdown, and JSON are free to read without an account or API key. - Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end. - WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers. - Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}. - Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer . Setup: https://y2.dev/docs/api/create-key. - x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402. - OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json. Collected public records only. Check source status for coverage and freshness.