vulnti.work

Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, t…

中危 CVSS 4.3
CVECVE-2026-54183
首次发现2026-09-16 16:15 UTC
披露时间2026-08-12 16:17 UTC
最后更新2026-09-16 16:15 UTC
通道状态auto

摘要

Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI. The masker's recursion-depth limit did not descend into values nested inside a list, tuple, or set beyond that limit, so an Airflow Variable holding such a deeply-nested value was shown unmasked in the Variables UI. The exposure is limited to the UI: any authenticated user who can see the Variable in the UI can already read its full value through the Variables REST API, so this does …

中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。

深度研判

该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。

受影响产品

  • :

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD