This blog post outlines why message brokers can’t be trusted, and how to exploit Apache Airflow in order to gain privileges to machines that are supposed to be protected.