Jarek Potiuk

Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy

Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints

Apache Airflow: DAG authorization bypass on /ui/structure/structure_data

Apache Airflow: Arbitrary File Read via Log Symlink following in FileTaskHandler

Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users

Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()

Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account

Apache Airflow Keycloak provider: Keycloak multi-team provisioning grants every team role global audit-log read

Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default

Apache Airflow Keycloak provider: Keycloak auth manager: logout does not invalidate the session — JWTMiddleware mints an unrevoked replacement token