Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-30912

Apache Airflow: Exposing stack trace in case of constraint error

Description

In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Airflow

Default version status: unaffected

  • 0 to < 3.2.0affected

References