Severity
High
Analysis Summary
CVE-2025-30473
Apache Airflow Common SQL Provider could allow a remote authenticated attacker to gain elevated privileges to execute arbitrary commands, caused by a SQL injection flaw when using the partition clause in SQLTableCheckOperator as parameter.
Impact
- Privilege Escalation
Indicators of Compromise
CVE
CVE-2025-30473
Affected Vendors
Apache
Affected Products
- Apache Airflow Common SQL Provider - 1.24.0
Remediation
Upgrade to the latest version of Apache Airflow Common SQL Provider, available from the Apache Website.