CVE-2025-55201 – “Apache Airflow Copier Library and CLI App File Access Vulnerability”

CVE ID : CVE-2025-55201

Published : Aug. 18, 2025, 5:15 p.m. | 56 minutes ago

Description : Copier library and CLI app for rendering project templates. Prior to 9.9.1, a safe template can currently read and write arbitrary files because Copier exposes a few pathlib.Path objects in the Jinja context which have unconstrained I/O methods. This effectively renders the security model w.r.t. filesystem access useless. This vulnerability is fixed in 9.9.1.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…