Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-5r2q-cc18-v7cx
Vulnerability ID VCID-5r2q-cc18-v7cx
Aliases CVE-2025-57735
GHSA-c92r-g8j5-vhcx
Summary When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should upgrade to Airflow 3.2+ Users are recommended to upgrade to version 3.2.0, which fixes this issue.
Status Published
Exploitability 0.5
Weighted Severity 9.0
Risk 4.5
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-613 Insufficient Session Expiration
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2025-57735
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2025-57735
epss 0.0003 https://api.first.org/data/v1/epss?cve=CVE-2025-57735
cvssv3.1_qr CRITICAL https://github.com/advisories/GHSA-c92r-g8j5-vhcx
cvssv3.1 9.1 https://github.com/apache/airflow
generic_textual CRITICAL https://github.com/apache/airflow
cvssv3.1 9.1 https://github.com/apache/airflow/pull/56633
generic_textual CRITICAL https://github.com/apache/airflow/pull/56633
ssvc Track https://github.com/apache/airflow/pull/56633
cvssv3.1 9.1 https://github.com/apache/airflow/pull/61339
generic_textual CRITICAL https://github.com/apache/airflow/pull/61339
ssvc Track https://github.com/apache/airflow/pull/61339
cvssv3.1 9.1 https://lists.apache.org/thread/ovn8mpd8zkc604hojt7x3wsw3kc60x98
generic_textual CRITICAL https://lists.apache.org/thread/ovn8mpd8zkc604hojt7x3wsw3kc60x98
ssvc Track https://lists.apache.org/thread/ovn8mpd8zkc604hojt7x3wsw3kc60x98
cvssv3.1 9.1 https://nvd.nist.gov/vuln/detail/CVE-2025-57735
generic_textual CRITICAL https://nvd.nist.gov/vuln/detail/CVE-2025-57735
cvssv3.1 9.1 http://www.openwall.com/lists/oss-security/2026/04/09/16
generic_textual CRITICAL http://www.openwall.com/lists/oss-security/2026/04/09/16
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2025-57735
https://github.com/apache/airflow
https://nvd.nist.gov/vuln/detail/CVE-2025-57735
http://www.openwall.com/lists/oss-security/2026/04/09/16
56633 https://github.com/apache/airflow/pull/56633
61339 https://github.com/apache/airflow/pull/61339
GHSA-c92r-g8j5-vhcx https://github.com/advisories/GHSA-c92r-g8j5-vhcx
ovn8mpd8zkc604hojt7x3wsw3kc60x98 https://lists.apache.org/thread/ovn8mpd8zkc604hojt7x3wsw3kc60x98
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://github.com/apache/airflow
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://github.com/apache/airflow/pull/56633
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-09T13:53:16Z/ Found at https://github.com/apache/airflow/pull/56633
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://github.com/apache/airflow/pull/61339
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-09T13:53:16Z/ Found at https://github.com/apache/airflow/pull/61339
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://lists.apache.org/thread/ovn8mpd8zkc604hojt7x3wsw3kc60x98
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-09T13:53:16Z/ Found at https://lists.apache.org/thread/ovn8mpd8zkc604hojt7x3wsw3kc60x98
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2025-57735
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Found at http://www.openwall.com/lists/oss-security/2026/04/09/16
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.09215
EPSS Score 0.0003
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:14:39.764089+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2025/57xxx/CVE-2025-57735.json 38.6.0