CVE-2026-27173: Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments

[Vincent Beck <vincbeck () apache org>]

Severity: Moderate 

Affected versions:

- Apache Airflow CNCF Kubernetes provider (apache-airflow-providers-cncf-kubernetes) before 10.17.0

Description:

JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to 
Kuberentes Pods. This could allow users with just read-only access to perform actions that were only available to 
running tasks via Task SDK and potentially allow to modify state of Airflow Database for tasks.

Credit:

Nikolai Dvoinishnikov, Welltory (finder)
Anton Kuznetsov, Welltory (finder)
Anish Giri (remediation developer)

References:

https://github.com/apache/airflow/pull/60108
https://airflow.apache.org/
https://www.cve.org/CVERecord?id=CVE-2026-27173