🧰 Apache Airflow

The items that name it 4

• [tl;dr sec] #345 - Bug Rumors → Exploits, Version Control DFIR, Agentic Worms
  article2026-09-10
• How AI orchestration platforms ship RCE by design | Ebook/Report | Endor Labs
  paper2026-08-26
• Hacking your life with AI can get you hacked | Blog | Endor Labs
  writeup2026-08-18

  BashOperator renders bash_command via Jinja2 using dag_run.conf values supplied at trigger time, then runs subprocess.run(['bash','-c', ...]); vulnerable pattern taught unguarded in getting-started docs. CVE accepted by Airflow security team (Jarek Potiuk); fix in 3.2.0 is documentation-only, sink u

• Shipping post-quantum cryptography to Python
  writeup2026-06-30

  uses pyca/cryptography for cryptographic operations

In every workspace you can read 6