A DAG author can create a symbolic link inside the task's log directory or supply a task_id that contains path traversal tokens. The FileTaskHandler then resolves the target file outside the configured base_log_folder, allowing the API server process to read or overwrite arbitrary files such as /etc/passwd or airflow.cfg. This flaw exposes confidential data and permits modification of system configuration, effectively compromising confidentiality and integrity of the deployment.

Apache Airflow, published by the Apache Software Foundation. Deployments prior to version 3.2.2 are affected, particularly those that share the worker log folder with the API server. The issue does not affect isolated worker setups where the log volume is not accessible to the API server.

The vulnerability can be exploited by any actor who can author or modify a DAG, which often requires administrative permissions. < 1% EPSS score indicates a low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog, but the CVSS score is 6.5. The attack path requires the ability to create files in the worker log directory and to trigger a task run that resolves the path, making the risk moderate in environments where DAG authors are trusted but the log volume is shared.