CVE-2025-67895

Support for the Edge3 provider on Airflow 2 was exclusively developmental in nature and was never officially released. However, installing and configuring the Edge3 provider on Airflow 2 implicitly activated an undocumented API created solely for testing purposes during development. This API allowed a DAG author to execute arbitrary code in the context of the Airflow 2 webserver process — that is, with privileges that a DAG author should not normally have. In Airflow 3, the vulnerable code was removed, and Edge3 provider versions >= 2.0.0 require at least Airflow 3.

An attacker with DAG author privileges can execute arbitrary code (RCE) in the context of the Airflow 2 webserver process, which can lead to complete compromise of system confidentiality, integrity, and availability.

The Edge3 provider should be uninstalled from Airflow 2 and migration to Airflow 3 should be performed. Edge3 provider versions >= 2.0.0 require at least Airflow 3 and do not contain vulnerable code — however, it is not possible to use Edge3 provider 2.0.0+ on Airflow 2. If migration to Airflow 3 is not immediately possible, the Edge3 provider should be immediately uninstalled from Airflow 2.

Apache Airflow Providers Edge3 versions before 2.0.0, installed and configured on Apache Airflow 2. Installations based on Airflow 3 are not vulnerable.