Vulnerability · low
Apache Airflow example Dag shell injection via IPv6 zone identifier (CVE-2026-101031)
Tier B · Patch this week – Put it in the sprint
Who’s exposed: Deployments running the example_dag_decorator example Dag in Airflow 3.0.5 to 3.3
Tier B because: Full takeover OR secrets exposed OR supply chain
Reach
Attack
Damage
Fix
Popular tool · Full takeover
What to do
- Upgrade Apache Airflow to 3.4.0 or later.
- Check whether the example_dag_decorator example Dag is deployed in your environment.
The Brief
- Apache Airflow's shipped example_dag_decorator example Dag had a shell command injection flaw, tracked as CVE-2026-101031.
- The Dag validated an IP address fetched over HTTP with Python's ipaddress module, then placed it into a shell command, and the IPv6 zone identifier allowed injection.
- Affected versions are Apache Airflow 3.0.5 before 3.4.0, and the advisory rates severity as low.
Why it matters
Only deployments that run the example Dag and handle HTTP-fetched IPv6 addresses are at risk, but the flaw shows how unvalidated input can reach a shell command even after an IP check.
The checklist behind the tier
Checklist · 3 of 10 yes
| Yes | Hits tech teams | Judgment: Apache Airflow is a developer and data-ops orchestration tool that teams build with and run. |
| No | Core infrastructure | Judgment: Airflow is a single popular framework, not core infrastructure like OpenSSH or the Linux kernel. |
| Yes | Popular tool | Judgment: Airflow is a widely used mainstream data orchestration platform. |
| No | Exploited in the wild | oss-sec post reports only a disclosed vulnerability; no observed attacks are mentioned. |
| No | Public exploit | oss-sec post describes the flaw but mentions no published exploit code or PoC. |
| No | Remote, no login | oss-sec post does not state unauthenticated network exploitation; the input is an HTTP-fetched value in an example Dag. |
| Yes | Full takeover | oss-sec post: Shell command injection, which allows arbitrary command execution on the host. |
| No | Secrets exposed | oss-sec post reports no stolen credentials, tokens or data exposure. |
| No | Supply chain | oss-sec post describes a bug in an example Dag, not malicious code shipped through a trusted channel. |
| No | No fix yet | oss-sec post lists affected versions as 3.0.5 before 3.4.0, implying a fix in 3.4.0. |
The official record
From CVE.org, CISA’s Known Exploited Vulnerabilities catalog, FIRST EPSS and the GitHub Advisory Database. Where these answer a checklist fact, they win over the reporting.
- Exploited
- Not in CISA’s exploited catalog
Timeline
Vulnerability posted to oss-sec by Rahul Vats
Open Source Security
CVE-2026-101031: Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier
Source
CVE-2026-101031: Apache Airflow: Shell command injection in the example_dag_decorator example Dag via an IPv6 zone identifier ↗ Open Source Security · 3h ago
First seen · 1 source · Full story page · How tiers are decided