Search: CVE-2025-57735

CVE-2025-57735 is a critical vulnerability in Apache Airflow versions prior to 3.2.0 where JWT tokens used for authentication are not invalidated upon user logout. This flaw allows an intercepted token to be reused, potentially enabling unauthorized access. The issue is fixed in Apache Airflow version 3.2.0 and later, which implement token invalidation at logout to prevent token reuse.