UpHeron
All vulnerabilities

Servers and applications

CVE-2024-29735

Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2 through 2.8.3. Airflow's local file task handler in Airflow incorrectly set permissions for all parent folders of log folder, in default configuration adding write access to Unix group of the folders. In the case Airflow is run with the root user (not recommended) it added group…

Severity
Medium 5.3
Published
26 Mar 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache AirflowServers and applications · cpe:a:apache:airflow
  • From 2.8.2 up to 2.8.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-29735
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-29735