CVE-2026-30912
unknown
CVSS v3
—
CVSS v2
—
VIR risk
—
Description
In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.
Predictions
Exploit likelihood
30%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| PyPI | apache-airflow-core | <3.2.0 | 3.2.0 |
| PyPI | apache-airflow | <3.2.0 | 3.2.0 |
References
Verify integrity in audit chain (admin only). AS-IS.