PyPI/apache-airflow CVE-2024-29735: medium 5.3, EPSS 1.46%

Apache Airflow Improper Preservation of Permissions vulnerability

Action: Upgrade apache-airflow to 2.8.4 or later.

pip install apache-airflow==2.8.4

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1132
• https://nvd.nist.gov/vuln/detail/CVE-2024-29735
• https://github.com/apache/airflow/issues/37200
• https://github.com/apache/airflow/pull/37310
• https://github.com/apache/airflow/commit/aae4a83cdfb3be4afeefd88a7bfa3c4d8d184958
• https://airflow.apache.org/docs/apache-airflow/stable/configurations-ref.html#file-task-handler-new-folder-permissions
• https://github.com/apache/airflow
• https://lists.apache.org/thread/8khb1rtbznh100o325fb8xw5wjvtv536
• http://www.openwall.com/lists/oss-security/2024/03/26/2
• https://pypi.org/project/apache-airflow
• https://github.com/advisories/GHSA-cff3-5qrp-hqx7

CVE-2024-29735 · published 2026-07-07T11:45:36.686435Z · modified 2026-07-07T17:57:01.251372080Z · JSON