Security Test: Airflow Config Exposure¶

Description¶

Default Severity: high

When the Apache Airflow configuration file is accidentally left accessible, it can leak sensitive details like credentials and system settings. This opens the door for attackers to misconfigure or abuse your airflow instance, potentially exposing your data and overall infrastructure. The vulnerability often crops up from default settings or misconfigured access controls, so always double-check that only trusted users can access these files.

Configuration¶

Identifier: information_disclosure/airflow_config_exposure

Examples¶

All configuration available:

checks:
  information_disclosure/airflow_config_exposure:
    skip: false # default

Compliance and Standards¶