AWS Patches Critical 'FlowFixation' Bug in Airflow Service to Prevent Session Hijacking

Cybersecurity researchers have shared details of a now-patched security vulnerability in Amazon Web Services (AWS) Managed Workflows for Apache Airflow (MWAA) that could be potentially exploited by a malicious actor to hijack victims' sessions and achieve remote code execution on underlying instances.
The vulnerability, now addressed by AWS, has been codenamed FlowFixation by Tenable.

actor airflow amazon amazon web services apache aws bug code code execution critical cybersecurity exploited hijack hijacking malicious managed patches remote code remote code execution researchers security security vulnerability service services session session hijacking sessions vulnerability web web services workflows