CVE-2026-48828 | Apache Airflow up to 3.2.x Bulk Variables API missing encryption

A vulnerability identified as problematic has been detected in Apache Airflow up to 3.2.x. Impacted is an unknown function of the component Bulk Variables API. Performing a manipulation results in missing encryption of sensitive data.

This vulnerability was named CVE-2026-48828. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More