This vulnerability involves the exposure of JWT tokens used by Kubernetes Executor workers in Apache Airflow's CNCF Kubernetes provider. Users with read-only access to Kubernetes Pods can access these tokens, enabling them to perform privileged actions through the Task SDK and potentially alter the Airflow Database state related to tasks. The issue is classified as CWE-538, concerning the insertion of sensitive information into locations accessible externally. The CVSS 3.1 score is 8.7 (high), with attack vector local, low attack complexity, low privileges required, no user interaction, scope changed, and high impact on confidentiality, integrity, and low impact on availability. No patch or official remediation level has been provided as of the published date.

The vulnerability allows users with only read-only access to Kubernetes Pods to gain access to JWT tokens that should be restricted to running workers. This unauthorized access can lead to privilege escalation within the Airflow environment, enabling these users to perform actions via the Task SDK that are normally limited to running tasks. Consequently, attackers could modify the state of the Airflow Database for tasks, impacting confidentiality and integrity of task data and potentially disrupting workflow operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict read-only access to Kubernetes Pods in environments running the affected Apache Airflow CNCF Kubernetes provider versions. Monitor for updates from the Apache Software Foundation regarding patches or official mitigations.