Explosive drone found at Leipzig airport triggers German security council meeting

Germany's national security council met in Berlin on Friday under Chancellor Friedrich Merz to assess two aviation security incidents that have raised immediate questions about the vulnerability of the country's military logistics infrastructure. The first, in the early hours of Wednesday, involved a drone carrying professional-grade explosives discovered hovering near a Ukrainian Antonov Airlines cargo aircraft at Leipzig-Halle airport. The second, hours later, saw a diverted cargo plane struck by an unidentified object in mid-air before landing in Hanover with minor damage.

The Leipzig drone discovery

According to prosecutors and media reports, an airport employee noticed the drone near the Ukrainian aircraft and managed to bring it down before police arrived. A bomb disposal robot was deployed and air traffic halted for several hours while the device was rendered safe. The drone was equipped with what prosecutors described as professional explosives and a detonator; the only reason it did not detonate was a defect in the detonator itself. Unconfirmed reports in German media have identified the explosive as Semtex, a plastic explosive with both industrial and military applications, infamously used in the 1988 Lockerbie bombing that killed 270 people.

The federal prosecutor's office characterised the incident as a serious attack on Germany's transport and logistics infrastructure, adding that it could have threatened both the country's external and internal security. Interior Minister Alexander Dobrindt went further, calling it a hybrid attack that spelled a new level of danger and stating that a foreign power may have been involved. His language aligns with the assessment of German security services, which have for months attributed a campaign of sabotage, espionage and disinformation to Russia.

A second aircraft struck in mid-air

While the Leipzig shutdown was under way, a cargo plane that had abandoned its planned landing at the airport reported hitting an unidentified object in flight. The aircraft landed safely in Hanover, where inspectors found minor damage. German police have searched the suspected impact area for debris or other evidence but have not reported any findings. The proximity in time and location of the two events has intensified concern, though investigators have not publicly linked them.

Leipzig's strategic role in military logistics

Leipzig-Halle airport is not a typical commercial hub. It functions as a critical node for military and humanitarian airlift, used regularly by the Bundeswehr, NATO allies and, since the full-scale invasion began, by Ukraine's Antonov Airlines for the transport of outsized cargo and equipment. The airport's location in eastern Germany, combined with its long runways and specialised handling facilities, makes it a natural gateway for materiel moving eastward. Any disruption there has immediate operational consequences for the supply chain supporting Ukraine's defence.

Germany has become Ukraine's single largest European supplier of military equipment, a position that has only grown since the United States Congress delayed aid packages in late 2023 and early 2024. The federal government has delivered air defence systems, artillery, armoured vehicles and ammunition worth billions of euros. Much of that materiel transits through Leipzig. An attack on the airport, or even the credible threat of one, therefore carries significance far beyond a local security incident.

Russian denial and the information contest

The Russian embassy in Berlin issued a statement dismissing the entire episode as a hastily contrived provocation that serves only the interests of Kyiv and what it called the militarist wing of the European political establishment. The embassy said it was alarmed by a new wave of anti-Russian hysteria in Germany and argued that the true danger lay with politicians enthusiastically developing scenarios for an imminent war with Russia. The language mirrors previous Russian responses to accusations of sabotage against European infrastructure, including the Nord Stream pipeline explosions and a series of arson attacks on logistics facilities in Germany, Poland and the Baltic states.

Berlin has not formally attributed responsibility. The chancellor's office and the foreign ministry have confined themselves to describing the facts as established by investigators. That restraint is deliberate: without forensic certainty, an official accusation would hand Moscow a propaganda victory and could constrain Germany's diplomatic options. But the absence of an official attribution has not prevented political figures from drawing their own conclusions.

Domestic political pressure mounts

Katharina Dröge, co-leader of the Green Party's parliamentary group, told the newspaper Welt that the incident could be an act of Russian state terrorism. Her intervention reflects a broader shift in German political discourse. Since the invasion of Ukraine, the Greens have been among the most hawkish voices in the coalition, pushing for faster weapons deliveries and a harder line on Russian energy infrastructure. The opposition CDU/CSU, now led by Merz, has similarly framed the incident as evidence that the hybrid war against Germany has entered a more dangerous phase.

The AfD, by contrast, has warned against what it calls war-mongering and demanded de-escalation. The party's proximity to Russian narratives has been documented by the domestic intelligence agency, which monitors parts of the AfD as a suspected extremist grouping. The incident thus feeds into an already polarised debate over Germany's role in the war, the credibility of its security apparatus and the limits of its strategic patience.

A pattern of hybrid operations

Security analysts have long warned that Russia's intelligence services, particularly the GRU's Unit 29155, have developed a playbook of deniable attacks on European soil. These include the 2018 Salisbury novichok poisoning, the 2014 ammunition depot explosion in Vrbětice, Czech Republic, and a string of recent incidents: fires at defence contractors in Berlin and Bavaria, sabotage of railway signalling systems, and the arrest of suspected agents planning attacks on military infrastructure. The Leipzig drone, if ultimately linked to a state actor, would represent an escalation in both method and target: an airborne improvised explosive device aimed at a specific military logistics flight.

The use of a drone also marks a tactical evolution. Previous sabotage attempts have relied on human operatives placing incendiary devices in warehouses or on trains. A drone allows remote deployment, reduces the risk of capture, and can be launched from a considerable distance. Leipzig-Halle's perimeter security, designed for conventional threats, may not be optimised for low, slow, small unmanned aerial systems. That vulnerability is shared by airports across Europe.

The coming days will test whether the forensic trail leads to a identifiable actor, and whether Berlin judges the evidence sufficient for a public attribution. That decision will shape not only Germany's domestic security posture but its credibility within the alliance. For now, the drone sits in an evidence locker, the Hanover aircraft undergoes detailed inspection, and the security council's deliberations remain classified.