CVE-2026-30912
Low
Low
Medium
High
Critical
CVSS Score
Vulnerability Description
In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false. That could lead to exposing additional information to potential attacker. Users are recommended to upgrade to Apache Airflow 3.2.0, which fixes the issue.
Severity Details
out of 10.0
Low
Weakness Type (CWE)
CWE-668
Exposure of Resource to Wrong Sphere
- Description
- The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
- Typical Severity
- Medium
- Abstraction Level
- Class
Key Information
- Published Date
- April 18, 2026
