Threats Tagged 'cve-2026-45426'
View all threats tagged with 'cve-2026-45426'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-45426'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-45426 is an authorization vulnerability in Apache Airflow 3.0.0 affecting the Log server's JWT token validation. The issue arises because the Log server uses Python's str.lstrip() to verify the JWT's subject claim against the requested Dag ID, which incorrectly strips characters rather than matching prefixes. This allows an authenticated Airflow worker with a valid Log-server JWT for one Dag to access logs of other Dags whose names share characters from the original Dag's name, potentially leaking task output and error traces. The vulnerability impacts deployments relying on per-Dag log-access scoping, such as multi-team or shared-worker setups. The CVSS score is 3.1 (low severity). Join the discussion | CVE Database V5 | 06/01/2026, 07:47:16 UTC Added: 06/01/2026, 09:18:45 UTC |
Showing 1 to 1 of 1 result