A vulnerability categorized as critical has been discovered in Apache Airflow up to 3.1.x. This affects an unknown function of the component JWT Token Handler. Executing a manipulation can lead to session expiration.
This vulnerability appears as CVE-2025-57735. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.
