In Apache Airflow versions details or lists includes the trigger kwargs for deferred tasks unmasked. When a deferred operator incorporates a secret such as an API key into its trigger arguments, any authenticated user who has read access to task‑instances for that DAG of credentials that may be The weakness is a classic information‑disclosure flaw under CWE‑200.

All deployments of Apache Airflow running any version earlier than 3.3.0 are vulnerable, regardless of operating system or distribution. The problem is tied to the task‑instance REST endpoints.

The vulnerability requires the attacker to be an authenticated user with DAG‑scoped task‑instance read permission, so exposure is limited to the Airflow API endpoint. The CVSS score of 6.5 classifies it as moderate severity, and the EPSS score of < 1% indicates a low but non‑zero likelihood of exploitation. Although the vulnerability is not listed in CISA’s KEV catalog, its ability to expose credentials makes it a significant risk. Based on the description, the likely attack vector is inbound HTTP/flow API endpoint, and exploitation is straightforward for users who already have legitimate access to the targeted DAG.