CVE-2024-45498 | Apache Airflow 2.10.0 DAG Trigger Permission command injection

A vulnerability has been found in Apache Airflow 2.10.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component DAG Trigger Permission Handler. The manipulation leads to command injection.

This vulnerability is known as CVE-2024-45498. The attack needs to be initiated within the local network. There is no exploit available.

It is recommended to upgrade the affected component.