VDB

CVE-2026-24098

CVE-2026-24098 PUBLISHED CVSS 6.5 MEDIUM

Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors

EPSS 0.74% · 51.8th percentile

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.74%
51.8th percentile

Affected Products

VendorProductVersions
Bitnamiairflow0, 0, 0
Bitnamiairflow0

Timeline

  • Feb 9, 2026 CVE Published
  • Feb 9, 2026 EPSS Score
  • Feb 9, 2026 PoC Published
  • Feb 9, 2026 PoC Published
  • Feb 11, 2026 CVE Updated
  • Feb 11, 2026 EPSS Score
  • Feb 14, 2026 EPSS Score
  • Feb 16, 2026 EPSS Score
  • Feb 18, 2026 EPSS Score
  • Feb 21, 2026 EPSS Score
  • Feb 23, 2026 EPSS Score
  • Feb 25, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›