CVE-2026-49298 | Apache Airflow up to 3.2.1 KubernetesExecutor Command-Line Argument information disclosure

A vulnerability categorized as problematic has been discovered in Apache Airflow up to 3.2.1. Affected by this vulnerability is an unknown functionality of the component KubernetesExecutor Command-Line Argument Handler. The manipulation results in information disclosure.

This vulnerability is known as CVE-2026-49298. Access to the local network is required for this attack. No exploit is available.

It is advisable to upgrade the affected component.