Apache Airflow: improper access control
Medium4.3CVE-2026-75158 · Published Sep 21, 2026 · updated Sep 26, 2026
Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events , including the source Dag ID, task ID, run ID and event timestamps , for Dags they have no permission to see. Because the filter was also absent from the count query, `total_entries` and pagination disclosed the existence of hidden Dags even without inspecting individual rows. Deployments are affected whenever per-Dag access control is used to separate teams or tenants; no special configuration is required. Upgrade to apache-airflow 3.3.2 or later.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| apache-airflow PyPI | < 3.3.2 | 3.3.2 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity from
- the CVSS score
- Also known as
- BIT-airflow-2026-75158, CVE-2026-75158
More Apache Airflow advisories
All Apache Airflow| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 21 | When a request to the Airflow core API carries both a session cookie and an... Medium4.2Sep 21 | Medium4.2 | No fix yet |
| Sep 21 | Apache Airflow: the Core API logout endpoint revokes only a session token...Critical9.1Sep 21 | Critical9.1 | 3.3.2 |
| Aug 12 | Apache Airflow's Backfill API authorized a request against a Dag id supplied by...High7.5Aug 12 | High7.5 | 3.3.1 |
| Aug 12 | Apache Airflow wrote Variable values and Connection `extra` contents to the...Medium6.5Aug 12 | Medium6.5 | 3.3.1 |
| Aug 12 | Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON...Medium6.5Aug 12 | Medium6.5 | 3.3.1 |
| Aug 12 | Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by...High8.8Aug 12 | High8.8 | 3.3.1 |