← Vulnerability feed

Vulnerability record · CVE-2022-24288 · published 25 February 2022

CVE-2022-24288: Apache Airflow example DAGs OS command injection via web UI

Apache · Airflow

Several example DAGs in Apache Airflow before 2.2.4 failed to sanitize user-supplied params, allowing OS command injection. Because the flaw is reachable through the web UI, any user who can trigger those DAGs can run arbitrary commands on the Airflow worker host.

8.8 CVSS 3.1 High EPSS 78% · top 0.4% CWE-78 · OS command injection
8.8CVSS 3.1 base score, v2 6.5
78%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 18 September 2026. Confidence: medium.

high priorityCVSS 8.8 with network reachability and low privileges, plus a very high EPSS score, makes this a high-priority fix despite no KEV listing.

What it is

Several example DAGs in Apache Airflow before 2.2.4 failed to sanitize user-supplied params, allowing OS command injection. Because the flaw is reachable through the web UI, any user who can trigger those DAGs can run arbitrary commands on the Airflow worker host.

Impact

An attacker with a low-privileged Airflow account gains arbitrary OS command execution on the host running the affected DAG, leading to full compromise of confidentiality, integrity and availability of that system.

Attack surface

Reached over the network through the Airflow web UI by triggering the vulnerable example DAGs; the CVSS vector requires low privileges (PR:L) and no user interaction (UI:N).

Exploitation

Not listed in CISA KEV and no public exploit tag is present in the references, but EPSS is very high (0.7788, 99.5th percentile), indicating elevated likelihood of exploitation activity.

What to do

  • Upgrade Apache Airflow to 2.2.4 or later, which fixes the unsanitized example DAGs.
  • If immediate upgrade is not possible, remove or disable the affected example DAGs from the DAGs folder.
  • Restrict web UI access to trusted users and enforce least privilege on Airflow roles that can trigger DAGs.
  • Run Airflow workers with a dedicated low-privilege OS account and isolate them from sensitive hosts and credentials.

Detection

  • Review Airflow web UI and scheduler logs for unexpected DAG runs of example DAGs with unusual params values.
  • Monitor worker hosts for child processes spawned by Airflow tasks that invoke shells or unexpected binaries.
  • Alert on command-injection patterns (shell metacharacters, pipes, backticks) in DAG run parameters recorded in Airflow metadata.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t Mailing ListThird Party Advisory
https://lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t Mailing ListThird Party Advisory

Track CVE-2022-24288 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-13927Apache Airflow Experimental API missing authentication by defaultAirflow's Experimental API defaulted to allowing all requests without authentication, so any reachable instance exposed its API to unauthenticated ca…KEVEPSS 100%analysed8.8CVE-2020-11978Apache Airflow example DAG command injectionApache Airflow 1.10.10 and below ship an example DAG containing an OS command injection flaw. Any authenticated user can execute arbitrary commands a…KEVEPSS 99%analysed9.8CVE-2026-33264Apache airflow deserialization of untrusted data vulnerabilityA bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server …EPSS 1.6%9.8CVE-2023-25754Apache airflow vulnerabilityPrivilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.EPSS 2.3%9.8CVE-2023-22884Apache airflow command injection vulnerabilityImproper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apach…EPSS 11%9.8CVE-2022-40189Apache airflow os command injection vulnerabilityImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pig Provider, Apache Airfl…EPSS 4.1%9.8CVE-2022-38649Apache airflow os command injection vulnerabilityImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pinot Provider, Apache Air…EPSS 3.3%9.8CVE-2022-38054Apache airflow vulnerabilityIn Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.EPSS 2.1%

Source: NIST National Vulnerability Database (record CVE-2022-24288), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.