Security fixes in airflow-2 2.10.3-r0 (CVE-2026-44503)
Affects airflow-2Source GCVE Database
Not known to be exploited · fixed in 2.10.3-r0 : update airflow-2 when convenient.
Data as of 10/25/2026, 07:59:04 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.9% chance of exploitation in 30 days – higher than 60% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 2.10.3-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartairflow-2 | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade to airflow-2 version 2.10.3-r0 to apply the official fixes for CVE-2026-44503 and the related vulnerability. Since a patch is available, applying this update is the recommended remediation step.
Description
The airflow-2 package version 2.10.3-r0 addresses two security vulnerabilities, including CVE-2026-44503. This update provides fixes to mitigate these vulnerabilities. No detailed technical information or CVSS score is available for CVE-2026-44503. There are no known exploits in the wild for this vulnerability at this time.
Impact
The impact details for CVE-2026-44503 are not specified in the provided information. However, the presence of a patch indicates that the vulnerabilities could potentially be exploited if unpatched. There are no known active exploits reported.
Summary
CVE-2026-44503 is a security vulnerability affecting the airflow-2 package. The version 2.10.3-r0 release includes fixes for this and another vulnerability (ghsa-7j59-v9qr-6fq9). Specific technical details about the nature of CVE-2026-44503 are not provided in the available data. The package is not a cloud service, and the fix is available in the stated version.