id: PYSEC-2026-1151
published: "2026-07-07T14:34:50.999793Z"
modified: "2026-07-07T17:23:42.412662Z"
aliases:
- CVE-2025-27018
- GHSA-hhm6-jjf4-6pm3
summary: Apache Airflow MySQL Provider is Vulnerable to SQL Injection
details: "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider.\n\nWhen user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended.\nIt could lead to data corruption, modification and others.\nThis issue affects Apache Airflow MySQL Provider: before 6.2.0.\n\nUsers are recommended to upgrade to version 6.2.0, which fixes the issue."
affected:
- package:
    name: apache-airflow-providers-mysql
    ecosystem: PyPI
    purl: pkg:pypi/apache-airflow-providers-mysql
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 6.2.0
  versions:
  - 1.0.0
  - 1.0.0b1
  - 1.0.0b2
  - 1.0.0rc1
  - 1.0.1
  - 1.0.1rc1
  - 1.0.2
  - 1.0.2rc1
  - 1.1.0
  - 1.1.0rc1
  - 2.0.0
  - 2.0.0rc1
  - 2.0.0rc2
  - 2.1.0
  - 2.1.0rc1
  - 2.1.0rc2
  - 2.1.1
  - 2.1.1rc1
  - 2.2.0
  - 2.2.0rc1
  - 2.2.0rc2
  - 2.2.1
  - 2.2.1rc1
  - 2.2.2
  - 2.2.2rc1
  - 2.2.3
  - 2.2.3rc1
  - 3.0.0
  - 3.0.0rc1
  - 3.0.0rc2
  - 3.1.0
  - 3.1.0rc1
  - 3.2.0
  - 3.2.0rc1
  - 3.2.0rc2
  - 3.2.0rc3
  - 3.2.1
  - 3.2.1rc1
  - 3.3.0
  - 3.3.0rc1
  - 3.4.0
  - 3.4.0rc2
  - 3.4.0rc3
  - 4.0.0
  - 4.0.0rc1
  - 4.0.1
  - 4.0.1rc1
  - 4.0.2
  - 4.0.2rc1
  - 5.0.0
  - 5.0.0rc1
  - 5.1.0
  - 5.1.0rc1
  - 5.1.0rc2
  - 5.1.1
  - 5.1.1rc1
  - 5.2.0
  - 5.2.0rc1
  - 5.2.1
  - 5.2.1rc1
  - 5.3.0
  - 5.3.0rc1
  - 5.3.1
  - 5.3.1rc1
  - 5.4.0
  - 5.4.0rc1
  - 5.5.0
  - 5.5.0rc1
  - 5.5.1
  - 5.5.1rc1
  - 5.5.2
  - 5.5.2rc1
  - 5.5.2rc2
  - 5.5.3
  - 5.5.3rc1
  - 5.5.4
  - 5.5.4rc1
  - 5.6.0
  - 5.6.0rc1
  - 5.6.1
  - 5.6.1rc1
  - 5.6.2
  - 5.6.2rc1
  - 5.6.3
  - 5.6.3rc1
  - 5.7.0
  - 5.7.0rc1
  - 5.7.1
  - 5.7.1rc1
  - 5.7.2
  - 5.7.2rc1
  - 5.7.3
  - 5.7.3rc1
  - 5.7.4
  - 5.7.4rc1
  - 6.0.0
  - 6.0.0rc1
  - 6.0.0rc2
  - 6.1.0
  - 6.1.0rc1
  - 6.2.0rc1
references:
- type: ADVISORY
  url: https://nvd.nist.gov/vuln/detail/CVE-2025-27018
- type: WEB
  url: https://github.com/apache/airflow/pull/47254
- type: WEB
  url: https://github.com/apache/airflow/pull/47255
- type: PACKAGE
  url: https://github.com/apache/airflow
- type: WEB
  url: https://lists.apache.org/thread/m8ohgkwz4mq9njohf66sjwqjdy28gvzf
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2025/03/19/4
- type: PACKAGE
  url: https://pypi.org/project/apache-airflow-providers-mysql
- type: ADVISORY
  url: https://github.com/advisories/GHSA-hhm6-jjf4-6pm3
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- type: CVSS_V4
  score: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N