Vulnerability-Lookup

PYSEC-2026-773

Vulnerability from pysec - Published: 2026-07-06 08:03 - Updated: 2026-07-07 11:30

Details

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above.

Severity

8.8 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impacted products

Name	purl
apache-airflow-providers-docker	pkg:pypi/apache-airflow-providers-docker

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "apache-airflow-providers-docker",
        "purl": "pkg:pypi/apache-airflow-providers-docker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.0.0",
        "1.0.0b1",
        "1.0.0b2",
        "1.0.0rc1",
        "1.0.1",
        "1.0.1rc1",
        "1.0.2",
        "1.0.2rc1",
        "1.1.0",
        "1.1.0rc1",
        "1.2.0",
        "1.2.0rc1",
        "2.0.0",
        "2.0.0rc1",
        "2.0.0rc2",
        "2.1.0",
        "2.1.0rc1",
        "2.1.0rc2",
        "2.1.1",
        "2.1.1rc1",
        "2.2.0",
        "2.2.0rc1",
        "2.3.0",
        "2.3.0rc1",
        "2.4.0",
        "2.4.0rc1",
        "2.4.1",
        "2.4.1rc1",
        "2.4.1rc2",
        "2.5.0",
        "2.5.0rc1",
        "2.5.1",
        "2.5.1rc1",
        "2.5.2",
        "2.5.2rc1",
        "2.6.0",
        "2.6.0rc1",
        "2.7.0",
        "2.7.0rc1",
        "3.0.0rc1",
        "3.0.0rc2"
      ]
    }
  ],
  "aliases": [
    "CVE-2022-38362",
    "GHSA-746v-hfh2-xphm"
  ],
  "details": "Apache Airflow Docker\u0027s Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above.",
  "id": "PYSEC-2026-773",
  "modified": "2026-07-07T11:30:24.841491Z",
  "published": "2026-07-06T08:03:32.004381Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38362"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2022/08/16/1"
    },
    {
      "type": "PACKAGE",
      "url": "https://pypi.org/project/apache-airflow-providers-docker"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-746v-hfh2-xphm"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Remote code execution in Apache Airflow Docker\u0027s Provider"
}

CVE-2022-38362 (GCVE-0-2022-38362)

Vulnerability from cvelistv5 – Published: 2022-08-16 14:10 – Updated: 2024-08-03 10:54

Title

Docker Provider <3.0 RCE vulnerability in example dag

Summary

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.

Severity

No CVSS data available.

CWE

Remote Code Execution

Assigner

apache

References

2 references

URL	Tags
https://lists.apache.org/thread/614p38nf4gbk8xhvn…	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2022/08/16/1	mailing-listx_refsource_MLIST

Impacted products

1 product

Vendor	Product	Version
Apache Software Foundation	Apache Airflow	Affected: Apache Airflow Docker Provider , < 3.0.0 (custom)

Credits

Thanks to Kai Zhao of 3H Secruity Team for reporting this

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T10:54:03.738Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb"
          },
          {
            "name": "[oss-security] 20220816 CVE-2022-38362: Apache Airflow Docker Provider \u003c3.0 RCE vulnerability in example dag",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2022/08/16/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Apache Airflow",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "3.0.0",
              "status": "affected",
              "version": "Apache Airflow Docker Provider",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Thanks to Kai Zhao of 3H Secruity Team for reporting this"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Apache Airflow Docker\u0027s Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Remote Code Execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-08-16T20:06:13.000Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb"
        },
        {
          "name": "[oss-security] 20220816 CVE-2022-38362: Apache Airflow Docker Provider \u003c3.0 RCE vulnerability in example dag",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2022/08/16/1"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Docker Provider \u003c3.0 RCE vulnerability in example dag",
      "workarounds": [
        {
          "lang": "en",
          "value": "Disable loading of example DAGs or upgrade the apache-airflow-providers-docker to 3.0.0 or above"
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@apache.org",
          "ID": "CVE-2022-38362",
          "STATE": "PUBLIC",
          "TITLE": "Docker Provider \u003c3.0 RCE vulnerability in example dag"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Apache Airflow",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "Apache Airflow Docker Provider",
                            "version_value": "3.0.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Apache Software Foundation"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Thanks to Kai Zhao of 3H Secruity Team for reporting this"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Apache Airflow Docker\u0027s Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": [
          {}
        ],
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Remote Code Execution"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb",
              "refsource": "MISC",
              "url": "https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb"
            },
            {
              "name": "[oss-security] 20220816 CVE-2022-38362: Apache Airflow Docker Provider \u003c3.0 RCE vulnerability in example dag",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2022/08/16/1"
            }
          ]
        },
        "source": {
          "discovery": "UNKNOWN"
        },
        "work_around": [
          {
            "lang": "en",
            "value": "Disable loading of example DAGs or upgrade the apache-airflow-providers-docker to 3.0.0 or above"
          }
        ]
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2022-38362",
    "datePublished": "2022-08-16T14:10:09.000Z",
    "dateReserved": "2022-08-15T00:00:00.000Z",
    "dateUpdated": "2024-08-03T10:54:03.738Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

GHSA-746V-HFH2-XPHM

Vulnerability from github – Published: 2022-08-17 00:00 – Updated: 2023-04-13 17:53

Summary

Remote code execution in Apache Airflow Docker's Provider

Details

Severity

8.8 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "apache-airflow-providers-docker"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.0.0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2022-38362"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": true,
    "github_reviewed_at": "2023-04-13T17:53:42Z",
    "nvd_published_at": "2022-08-16T14:15:00Z",
    "severity": "HIGH"
  },
  "details": "Apache Airflow Docker\u0027s Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. Disable loading of example DAGs or upgrade apache-airflow-providers-docker to 3.0.0 or above.",
  "id": "GHSA-746v-hfh2-xphm",
  "modified": "2023-04-13T17:53:42Z",
  "published": "2022-08-17T00:00:21Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-38362"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2022/08/16/1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Remote code execution in Apache Airflow Docker\u0027s Provider"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

PYSEC-2026-773

CVE-2022-38362 (GCVE-0-2022-38362)

GHSA-746V-HFH2-XPHM

Tags

Sightings

Nomenclature