{ "document": { "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en-US", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Stackable GmbH and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "product-security@stackable.tech", "issuing_authority": "The Stackable Security Team is responsible for vulnerability handling across all Stackable offerings.", "name": "Stackable GmbH", "namespace": "https://www.stackable.tech/" }, "title": "Stackable Security Advisory for: CVE-2026-42271", "tracking": { "current_release_date": "2026-07-13T09:47:57.021005Z", "generator": { "engine": { "name": "SecObserve", "version": "1.54.0" } }, "id": "CVE-2026-42271", "initial_release_date": "2026-07-13T09:47:22.131433Z", "revision_history": [ { "date": "2026-07-13T09:47:22.131433Z", "number": "1", "summary": "Initial release" }, { "date": "2026-07-13T09:47:57.021005Z", "number": "2", "summary": "Updated advisory" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "branches": [ { "category": "product_version", "name": "3.0.6-stackable26.3.0-amd64", "product": { "name": "airflow:3.0.6-stackable26.3.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.1.6-stackable26.3.0-amd64", "product": { "name": "airflow:3.1.6-stackable26.3.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.6-stackable25.11.0-amd64", "product": { "name": "airflow:3.0.6-stackable25.11.0-amd64", "product_id": "pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech/sdp/airflow" } } } ], "category": "product_name", "name": "airflow" } ], "category": "architecture", "name": "amd64" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "3.0.6-stackable26.3.0-arm64", "product": { "name": "airflow:3.0.6-stackable26.3.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:b76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.1.6-stackable26.3.0-arm64", "product": { "name": "airflow:3.1.6-stackable26.3.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:e7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } }, { "category": "product_version", "name": "3.0.6-stackable25.11.0-arm64", "product": { "name": "airflow:3.0.6-stackable25.11.0-arm64", "product_id": "pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_identification_helper": { "purl": "pkg:oci/airflow@sha256:c232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech/sdp/airflow" } } } ], "category": "product_name", "name": "airflow" } ], "category": "architecture", "name": "arm64" } ], "category": "vendor", "name": "Stackable" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "1.75.9", "product": { "name": "litellm:1.75.9", "product_id": "pkg:pypi/litellm@1.75.9", "product_identification_helper": { "purl": "pkg:pypi/litellm@1.75.9" } } }, { "category": "product_version", "name": "1.80.12", "product": { "name": "litellm:1.80.12", "product_id": "pkg:pypi/litellm@1.80.12", "product_identification_helper": { "purl": "pkg:pypi/litellm@1.80.12" } } } ], "category": "product_name", "name": "litellm" } ], "category": "vendor", "name": "unknown" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/litellm@1.75.9", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/litellm@1.80.12", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/litellm@1.75.9", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/litellm@1.80.12", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/litellm@1.75.9", "relates_to_product_reference": "pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, { "category": "default_component_of", "full_product_name": { "name": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "product_id": "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" }, "product_reference": "pkg:pypi/litellm@1.75.9", "relates_to_product_reference": "pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-42271", "flags": [ { "label": "vulnerable_code_not_in_execute_path", "product_ids": [ "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" ] } ], "notes": [ { "category": "description", "text": "LiteLLM: Authenticated command execution via MCP stdio test endpoints", "title": "Vulnerability description" } ], "product_status": { "known_not_affected": [ "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" ] }, "references": [ { "category": "external", "summary": "Security Advisory", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42271" } ], "threats": [ { "category": "impact", "details": "CVE-2026-42271 is an OS command injection in litellm's MCP stdio test endpoints (POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list), which accept a full MCP server config (command/args/env) and spawn the supplied command as a subprocess with the proxy's privileges. Those endpoints exist only in the litellm proxy server (the litellm CLI / litellm.proxy app), not in the litellm Python library used for completion calls. This image never starts that proxy.\n\nIn the airflow image litellm is present only as a transitive dependency (google-cloud-aiplatform -> litellm) and is imported as a library. Because the proxy server is never started, the /mcp-rest/test/* routes are never registered or served and their command-spawning code never executes. Exploitation would also require a valid proxy API key and network access to the running proxy, neither of which exists without the proxy. This version sits within the affected range >=1.74.2,<1.83.7, but the vulnerable code is not in the execute path of this image.", "product_ids": [ "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" ] }, { "category": "impact", "details": "The litellm proxy server is not used in Airflow and it also can't be used, since the litellm proxy extra is not enabled.", "product_ids": [ "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.75.9@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow", "pkg:pypi/litellm@1.80.12@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow" ] } ], "title": "CVE-2026-42271" } ] }