---
id: CVE-2026-27173
title: >-
  JWT tokens that were used by workers in Kubernetes Executors have been exposed
  to users who had read only access to Kuberentes Pods
summary: >-
  JWT tokens that were used by workers in Kubernetes Executors have been exposed
  to users who had read only access to Kuberentes Pods. This could allow users
  with just read-only access to perform actions that were only available to
  running…
severity: high
cvss: 8.7
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L'
cwe:
  - CWE-538
vendor: apache
product: airflow_cncf_kubernetes
affected:
  - airflow_cncf_kubernetes < 10.17.0
patched:
  - airflow_cncf_kubernetes 10.17.0
published: '2026-05-19'
updated: '2026-06-30'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-27173'
references:
  - url: 'https://github.com/apache/airflow/pull/60108'
    label: security@apache.org
  - url: 'https://lists.apache.org/thread/pk3m2z4s2rkmc0v6gh9hnch9spc6stqw'
    label: security@apache.org
  - url: 'http://www.openwall.com/lists/oss-security/2026/05/19/35'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.00206
epssPercentile: 0.09415
ingestedAt: '2026-07-01T09:50:45.838Z'
---

## Overview

JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods. This could allow users with just read-only access to perform actions that were only available to running tasks via Task SDK and potentially allow to modify state of Airflow Database for tasks.

## Affected

- `airflow_cncf_kubernetes < 10.17.0`

## Remediation

Upgrade past the affected range:

- `airflow_cncf_kubernetes 10.17.0`