{"id":"CVE-2023-35797","kind":"vulnerability","aliases":["CVE-2023-35797","GHSA-hg6c-qqcm-r79r"],"related":[],"title":"Apache Airflow Hive Provider Beeline remote code execution with Principal","description":"Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider.\nThis issue affects Apache Airflow Apache Hive Provider: before 6.1.1.\n\nBefore version 6.1.1 it was possible to bypass the security check to RCE via\nprincipal parameter. For this to be exploited it requires access to modifying the connection details.\n\nIt is recommended updating provider version to 6.1.1 in order to avoid this vulnerability.","summary":"The Apache Airflow Hive provider let a user bypass a security check through the principal parameter when calling Beeline. An attacker who can edit connection details can run arbitrary code on the Airflow worker.","severity":"critical","cvss":9.8,"epss":0.02791,"exploited":false,"exploited_at":null,"products":[{"name":"apache-airflow-providers-apache-hive","fixed":["6.1.1"],"affected":"< 6.1.1","ecosystem":"pypi"},{"name":"apache apache-airflow-providers-apache-hive","fixed":["6.1.1"],"affected":"< 6.1.1","ecosystem":"vendor"}],"ecosystems":["pypi","vendor"],"tags":["airflow","cwe-20","data-pipelines","package","python","self-hosted"],"not_affected_if":["connections-editable-only-by-trusted-admins","hive-provider-not-installed","provider-6.1.1-or-later"],"how_to_check":"- Run `pip show apache-airflow-providers-apache-hive` and confirm the version is below `6.1.1`\n- Check whether any Airflow connection of type Hive/Beeline can be edited by users who should not be able to change it","fix":"- Upgrade `apache-airflow-providers-apache-hive` to `6.1.1` or later\n- Restrict who can create or edit Airflow connections until the upgrade is done","status":"open","published_at":"2023-07-03T10:15:09+00:00","first_seen_at":"2026-10-26T21:11:45+00:00","triaged_at":"2026-10-26T21:12:40+00:00","updated_at":"2026-10-26T21:20:32+00:00","category":"package","confidence":0.8,"triage":{"at":"2026-10-26T21:12:40Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade `apache-airflow-providers-apache-hive` to `6.1.1` or later\n- Restrict who can create or edit Airflow connections until the upgrade is done","reach":"network","title":"Apache Airflow Hive provider: Beeline principal parameter allows remote code execution","impact":"high","summary":"The Apache Airflow Hive provider let a user bypass a security check through the principal parameter when calling Beeline. An attacker who can edit connection details can run arbitrary code on the Airflow worker.","category":"package","nicknames":[],"who_cares":["airflow","python","data-pipelines","self-hosted"],"confidence":0.8,"needs_auth":"yes","worst_case":"Attacker runs arbitrary code on the Airflow worker host","analyst_note":"","how_to_check":"- Run `pip show apache-airflow-providers-apache-hive` and confirm the version is below `6.1.1`\n- Check whether any Airflow connection of type Hive/Beeline can be edited by users who should not be able to change it","needs_analyst":false,"not_affected_if":["hive-provider-not-installed","provider-6.1.1-or-later","connections-editable-only-by-trusted-admins"],"who_is_affected":"Teams running Apache Airflow with the Hive provider installed at a version before 6.1.1 are exposed. The attack needs the ability to modify Hive connection details, so deployments where only trusted admins edit connections face less practical risk, but the fix is still a simple upgrade.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"critical"},"cost_usd":0.000621,"input_tokens":3429,"output_tokens":557,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-20':37B '-2023':12A,20A '-35797':13A,21A '6.1.1':101C,104C,138C 'access':125C 'affect':94C 'airflow':2A,24A,31A,35B,48B,78B,89C,96C 'apach':1A,47B,85C,88C,95C,97C 'apache':23A,26A,28A,30A,33A 'apache-airflow-providers-apache-hive':22A,29A 'arbitrari':74B 'attack':66B 'avoid':142C 'beelin':5A,64B 'bypass':54B,109C 'call':63B 'check':57B,112C 'code':7A,75B 'connect':70B,129C 'cve':11A,19A 'cwe':36B 'data':39B 'data-pipelin':38B 'detail':71B,130C 'edit':69B 'execut':8A 'exploit':122C 'foundat':87C 'ghsa':15A 'ghsa-hg6c-qqcm-r79r':14A 'hg6c':16A 'hive':3A,27A,34A,49B,90C,98C 'host':45B 'improp':80C 'input':81C 'issu':93C 'let':51B 'modifi':127C 'order':140C 'packag':41B 'paramet':61B,117C 'pipelin':40B 'possibl':107C 'princip':10A,60B,116C 'provid':4A,50B,91C,99C,135C 'providers':25A,32A 'python':42B 'qqcm':17A 'r79r':18A 'rce':114C 'recommend':133C 'remot':6A 'requir':124C 'run':73B 'secur':56B,111C 'self':44B 'self-host':43B 'softwar':86C 'updat':134C 'user':53B 'valid':82C 'version':103C,136C 'via':115C 'vulner':83C,144C 'worker':79B","nicknames":[],"mitigations":[],"who_affected":"Teams running Apache Airflow with the Hive provider installed at a version before 6.1.1 are exposed. The attack needs the ability to modify Hive connection details, so deployments where only trusted admins edit connections face less practical risk, but the fix is still a simple upgrade.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2023-07-03T10:15:09+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"GitHub","poc_count":0,"sources":[{"source":"ghsa","external_id":"GHSA-hg6c-qqcm-r79r","url":"https://github.com/advisories/GHSA-hg6c-qqcm-r79r","severity":"critical","published_at":"2023-07-03T12:30:34+00:00","modified_at":"2026-10-26T21:10:57+00:00","first_seen_at":"2026-10-26T21:11:45+00:00","fetched_at":"2026-10-26T21:11:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2023-35797","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35797","severity":null,"published_at":"2023-07-03T10:15:09+00:00","modified_at":"2026-06-17T06:05:13+00:00","first_seen_at":"2026-10-26T21:20:32+00:00","fetched_at":"2026-10-26T21:20:32+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}