Skip to main content
CVE-2026-44503VulnerabilityPublished 07/30/2026Updated 09/09/2026

Security fixes in airflow-2 2.11.0-r2 (CVE-2026-44503)

Affects airflow-2Source GCVE Database

0

Not known to be exploited · fixed in 2.11.0-r2 : update airflow-2 when convenient.

Data as of 10/25/2026, 07:59:04 UTC

Severity
Medium

CVSS not yet scored by NVD

Exploitation

Not in CISA KEV, no exploitation reported

EPSS
0.9% chance of exploitation in 30 days – higher than 60% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 2.11.0-r2

What to do

Affected software

ProductAffectedFixed in
CleanStartairflow-2Affected
  • <2.11.0-r2
  • =2.11.0-r2
Fixed in
  • 2.11.0-r2

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should upgrade to airflow-2 version 2.11.0-r2 to apply the security fixes for CVE-2026-44503 and the other vulnerability. Since this is a non-cloud package, remediation requires manual updating to the fixed version. No additional mitigation guidance is provided.

Description

The airflow-2 package version 2.11.0-r2 addresses two security vulnerabilities, including CVE-2026-44503 and another identified as ghsa-7j59-v9qr-6fq9. This release provides security fixes to mitigate these issues. No CVSS score or detailed technical impact information is available for CVE-2026-44503. There are no known exploits in the wild associated with these vulnerabilities at this time.

Impact

The impact of CVE-2026-44503 is not explicitly described in the provided information. There are no known active exploits in the wild. The vulnerabilities addressed could potentially affect the security posture of airflow-2 installations prior to version 2.11.0-r2.

Summary

The airflow-2 package version 2.11.0-r2 includes fixes for two vulnerabilities, one of which is CVE-2026-44503. The specific technical details and impact of CVE-2026-44503 are not provided in the available data. The package is not a cloud service, and the patch is available in this version. No further exploitation details or attack vectors are described.

References

Community reviews

Loading reviews…