All vulnerabilities
CVE-2022-46421GHSA-rc58-qr9j-cpgwPYSEC-2026-274

apache-airflow-providers-apache-hive: Apache Airflow Hive Provider vulnerable to Command Injection

Apache Software Foundation apache-airflow-providers-apache-hivepipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
9.8Critical
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)3.29%Chance of exploitation activity in the next 30 days, higher than 88% of CVEs. Scored 26 Oct 2026FIRST EPSS
Fixed in5.0.0Fixed versionGitHub
Published20 Dec 2022Updated 26 Oct 2026CVE List

What fixes it

  • 5.0.0apache-airflow-providers-apache-hive, pipGitHub
  • 5.0.0Apache Airflow Hive ProviderCVE List
  • 5.0.0apache-airflow-providers-apache-hive, PyPIOSVpip install "apache-airflow-providers-apache-hive>=5.0.0"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0.

Text from CVE List

Affected versions 53

  • apache-airflow-providers-apache-hive, pip< 5.0.0GitHub
  • Apache Airflow Hive Provideraffected: all versions before 5.0.0CVE List
  • apache-airflow-providers-apache-hive, PyPIfrom first release, fixed in 5.0.0OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.0OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.0b1OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.0b2OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.1OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.1rc1OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.2OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.2rc1OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.3OSV
  • apache-airflow-providers-apache-hive, PyPI1.0.3rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.0OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.0rc2OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.1OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.1rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.1rc2OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.2OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.2rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.3OSV
  • apache-airflow-providers-apache-hive, PyPI2.0.3rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.1.0OSV
  • apache-airflow-providers-apache-hive, PyPI2.1.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.2.0OSV
  • apache-airflow-providers-apache-hive, PyPI2.2.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.2.0rc2OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.0OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.1OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.1rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.2OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.2rc1OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.3OSV
  • apache-airflow-providers-apache-hive, PyPI2.3.3rc1OSV
  • apache-airflow-providers-apache-hive, PyPI3.0.0OSV
  • apache-airflow-providers-apache-hive, PyPI3.0.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI3.0.0rc2OSV
  • apache-airflow-providers-apache-hive, PyPI3.1.0OSV
  • apache-airflow-providers-apache-hive, PyPI3.1.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI4.0.0OSV
  • apache-airflow-providers-apache-hive, PyPI4.0.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI4.0.0rc2OSV
  • apache-airflow-providers-apache-hive, PyPI4.0.0rc3OSV
  • apache-airflow-providers-apache-hive, PyPI4.0.1OSV
  • apache-airflow-providers-apache-hive, PyPI4.0.1rc1OSV
  • apache-airflow-providers-apache-hive, PyPI4.1.0OSV
  • apache-airflow-providers-apache-hive, PyPI4.1.0rc1OSV
  • apache-airflow-providers-apache-hive, PyPI4.1.1OSV
  • apache-airflow-providers-apache-hive, PyPI4.1.1rc2OSV
  • apache-airflow-providers-apache-hive, PyPI4.1.1rc3OSV
  • apache-airflow-providers-apache-hive, PyPI5.0.0rc1OSV

References 6