{"vulnerability": "CVE-2022-40127", "sightings": [{"uuid": "a78411ef-1c69-4b7a-ad65-544ca5447a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10482", "content": "\u25a0\u25a1\u25a1\u25a1\u25a1 Apache Airflow < 2.4.0 DAG example_bash_operator RCE POC.\n\nhttps://github.com/Mr-xn/CVE-2022-40127", "creation_timestamp": "2022-11-24T13:01:10.000000Z"}, {"uuid": "b6e90f2e-c54b-4c64-a708-1525d61ca0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40127\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.\n\ud83d\udccf Published: 2022-11-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T18:58:45.160Z\n\ud83d\udd17 References:\n1. https://github.com/apache/airflow/pull/25960\n2. https://lists.apache.org/thread/cf132hgm6jvzvsbpsozl3plf1r4cwysy\n3. http://www.openwall.com/lists/oss-security/2022/11/14/2", "creation_timestamp": "2025-04-30T19:13:45.000000Z"}, {"uuid": "e4acc017-a683-4ef4-a703-d3ddb6da13ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/85158", "content": "Internet Bug Bounty: CVE-2022-40127: RCE in Apache Airflow <2.4.0 bash example\n\nhttps://ift.tt/K1mhCXI", "creation_timestamp": "2023-01-05T19:31:50.000000Z"}, {"uuid": "4e971875-a0eb-4752-8e03-a1c0a126f65f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/34113", "content": "https://github.com/Mr-xn/CVE-2022-40127", "creation_timestamp": "2022-11-19T15:29:51.000000Z"}, {"uuid": "59cf9529-74f9-45dd-aa90-00a29886a322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1424", "content": "https://github.com/Mr-xn/CVE-2022-40127", "creation_timestamp": "2022-11-20T22:47:46.000000Z"}, {"uuid": "05ab7a37-2128-4972-b0d7-52be65aaf828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/17453", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-40127*\nGithub: https://github.com/jakabakos/CVE-2022-40127", "creation_timestamp": "2026-07-31T00:00:44.609333Z"}, {"uuid": "95cd6b66-052d-47f3-8cc0-9aa9e39dd78d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7200", "content": "#exploit\n1. CVE-2022-40127:\nApache Airflow <2.4.0 DAG example_bash_operator RCE\nhttps://github.com/Mr-xn/CVE-2022-40127\n\n2. Chromium V8 Engine Exploits\nhttps://github.com/anvbis/chrome.v8.n-days", "creation_timestamp": "2022-11-19T13:07:01.000000Z"}, {"uuid": "8382ebe7-1ddf-4d48-90be-e2f88f0b14b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-07-31T21:00:04.213993Z"}, {"uuid": "3640f12f-c49c-4e8b-bd2b-fbab2354807c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-08-01T00:00:12.645475Z"}, {"uuid": "76a24bd6-5efd-47a8-8d0d-f92ca9a3377c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/18290", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-40127-Airflow-RCE*\nGithub: https://github.com/jakabakos/CVE-2022-40127-Airflow-RCE", "creation_timestamp": "2026-07-29T12:00:10.069715Z"}, {"uuid": "159dd7cd-9d56-47d9-9e9b-62ff00194ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/17453", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-40127*\nGithub: https://github.com/jakabakos/CVE-2022-40127", "creation_timestamp": "2026-07-29T12:00:14.130517Z"}, {"uuid": "f9f60c92-8a04-4363-b077-f83e2a7786e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-07-29T12:00:54.323108Z"}, {"uuid": "fc2fa283-22b1-48dc-8928-35197a528d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18290", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-40127-Airflow-RCE*\nGithub: https://github.com/jakabakos/CVE-2022-40127-Airflow-RCE", "creation_timestamp": "2026-07-30T00:00:22.286736Z"}, {"uuid": "4eb10800-19c1-4892-95fa-8857da9b0192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/17453", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-40127*\nGithub: https://github.com/jakabakos/CVE-2022-40127", "creation_timestamp": "2026-07-30T00:00:32.480663Z"}, {"uuid": "20f9cdb4-02ac-4e9e-81cb-7be0966d6236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/CVEhub/4927", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-40127\nGithub: https://github.com/Mr-xn/CVE-2022-40127\nDescribe: \nA vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided run_id parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0.", "creation_timestamp": "2026-07-30T00:01:32.513062Z"}, {"uuid": "80793ab1-ffa3-41e9-a1bd-927755bc9f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:52.904042Z"}, {"uuid": "ec2d3b2b-f54e-4bd5-9528-0061d9416ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:52.620361Z"}, {"uuid": "2725ec1a-7788-4231-8019-9bf26f6dfb74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:52.676070Z"}, {"uuid": "c2068147-0bd2-4392-9888-d92ee635fd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:52.947919Z"}, {"uuid": "d86b304f-7ae3-4e49-882d-e22710fd1be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:01:12.369425Z"}, {"uuid": "86e49d3c-7a38-4a6b-9870-5b4619fd4283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:01:12.418821Z"}, {"uuid": "c91b7df5-1205-4c88-8f8b-94e461dd9fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:01:12.663985Z"}, {"uuid": "5bb3b149-85bb-423b-93d3-0728fc9c393f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "seen", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:01:12.709899Z"}, {"uuid": "25d36265-6753-43cc-8ac6-9335c338b0d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T09:00:04.614627Z"}, {"uuid": "84e743b6-ef11-4455-8164-9d54c704c796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T09:00:04.669268Z"}, {"uuid": "cc123c1c-64f3-409b-97ea-61276a4b3add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T10:00:05.723740Z"}, {"uuid": "0ae389a1-2685-4028-9c85-78a95f11a259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T10:00:05.767985Z"}, {"uuid": "0b45a7ab-a14c-4c6d-b0ec-52af407bbaf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115324", "content": "In this writeup, we delve into the analysis of command injection vulnerability (known as CVE-2022\u201340127)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-05T01:00:33.348196Z"}, {"uuid": "e9027ce8-b4f4-442d-8db9-d73277072eeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115322", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-5a067eb44b36?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-05T01:00:33.400452Z"}, {"uuid": "26dade4b-f4e7-4a20-b341-8031aa8ca9f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115467", "content": "The provided Python code is an exploit script targeting CVE-2022\u201340127, a Remote Code Execution (RCE)Continue reading on Medium \u00bb (https://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-05T01:00:33.862024Z"}, {"uuid": "efd7667e-feba-4673-b9c9-83500bb1f700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40127", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/115465", "content": "RCE via example DAG in Apache Airflow (CVE-2022\u201340127)\u200a\u2014\u200aExploit\nhttps://vsociety.medium.com/rce-via-example-dag-in-apache-airflow-cve-2022-40127-exploit-70c61a50b4da?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-05T01:00:33.916673Z"}]}