Vulnerability in Apache Software Foundation Airflow

CVE-2026-32690

Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked. If you do not store variables with sensitive values in JSO…

EPSS: 0.001 (29.2th percentile) — read the EPSS interpretation.