Mittel

Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holdin

Veröffentlicht: 21.09.2026
Aktualisiert: 11.10.2026 15:18

Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holding asset-read access could therefore enumerate asset events — including the source Dag ID, task ID, run ID and event timestamps — for Dags they have no permission to see. Because the filter was also absent from the count query, total_entries and pagination disclosed the existence of hidden Dags even without inspecting individual rows. Deployments are affected whenever per-Dag access control is used to separate teams or tenants; no special configuration is required. Upgrade to apache-airflow 3.3.2 or later.

Betroffene Software

Klicken Sie auf eine Technologie, um alle zugehörigen Schwachstellen anzuzeigen.

Plattform	Paket	Anfällige Versionen	Behoben in
Python (PyPI)	apache-airflow	< 3.3.2	3.3.2

Verweise

CVSS-Wert 4.3/10

CVSS-Vektor: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Schwäche (CWE): -
Plattform: Python (PyPI)
Paket: apache-airflow
Veröffentlicht: 21.09.2026
Aktualisiert: 11.10.2026 15:18

Quellen und Lizenzen

OSV / GitHub Advisory Database - PYSEC-2026-3988 - PyPA Advisory Database; CC BY 4.0

Schwachstellenhistorie: apache-airflow

Alle veröffentlichten Schwachstellen dieses Pakets (Python (PyPI)), neueste zuerst. Zeigt, ob es ein einmaliger Ausrutscher ist oder ein Paket, das man im Auge behalten muss.

Alle (158) im Archiv

Einträge insgesamt: 158
Erste → letzte: 08.2018 09.2026
Ohne Fix: 4
In Angriffen ausgenutzt: 2

Verteilung nach Schweregrad

Kritisch 16
Hoch 49
Mittel 86
Niedrig 7

Veröffentlichungen pro Jahr

2018: 1
2019: 8
2020: 12
2021: 5
2022: 16
2023: 31
2024: 18
2025: 6
2026: 61

21.09.2026

Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When a client logs out presenting its credential as an Authorization bearer header instead, th

Kritisch · 9.1 CVE-2026-86473 >= 3.0.0, < 3.3.2 3.3.2
21.09.2026

Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read. Any authenticated user holdin dieser Eintrag

Mittel · 4.3 CVE-2026-75158 < 3.3.2 3.3.2
12.08.2026

Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse. The authorization dependency parsed it with `int()`

Hoch · 7.5 CVE-2026-68968 < 3.3.1 3.3.1
12.08.2026

Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored callback path. Because `SyncCallback` is itself a

Hoch · 8.8 CVE-2026-67587 >= 3.3.0, < 3.3.1 3.3.1
12.08.2026

Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler. That sweep deserializes the task instance's `next_kwargs` without an

Hoch · 7.3 CVE-2026-67260 >= 3.3.0, < 3.3.1 3.3.1
12.08.2026

Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and instantiating it with arguments from the same blob, w

Hoch · 8.8 CVE-2026-58076 >= 3.3.0, < 3.3.1 3.3.1
07.07.2026

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a

Kritisch · 9.8 CVE-2026-33264 < 3.3.0 3.3.0
01.06.2026

A bug in Apache Airflow's XCom PATCH endpoint `PATCH /api/v2/xcomEntries/{key}` allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (e

Hoch · 8.8 CVE-2026-42359 >= 3.2.0, < 3.2.2 3.2.2
01.06.2026

A bug in Apache Airflow's bulk Task Instances API (`PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`) evaluated authorization against the `dag_id` resolved from the URL path whil

Hoch · 7.5 CVE-2026-41084 >= 3.2.0, < 3.2.2 3.2.2
01.06.2026

Apache Airflow's official documentation at `core-concepts/dag-run.html` ("Passing Parameters when triggering Dags") showed a verbatim `BashOperator(bash_command="echo value: {{ dag_run.conf['conf1'] }

Kritisch · 9.1 CVE-2026-42252 >= 3.0.0, < 3.2.2 3.2.2
01.06.2026

Apache Airflow: Authenticated users can bypass the `is_safe_url` check

Hoch · 7.2 CVE-2026-40961 < 3.2.2 3.2.2
01.06.2026

Apache Airflow Vulnerable to Deserialization of Untrusted Data

Hoch · 7.3 CVE-2026-45360 >= 3.2.0, < 3.2.2 3.2.2
18.04.2026

Apache Airflow allows code execution through crafted XCom payloads

Hoch · 7.2 CVE-2026-25917 < 3.2.0 3.2.0
16.04.2026

Apache Airflow: JWT token appearing in logs

Hoch · 7.5 CVE-2026-31987 >= 3.0.0, < 3.2.0 3.2.0
16.04.2026

Apache Airflow: RCE by race condition in example_xcom dag

Hoch · 8.1 CVE-2025-54550 < 3.2.0 3.2.0
13.04.2026

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly tru

Hoch · 8.8 CVE-2026-33858 >= 3.1.8, < 3.2.0 3.2.0
09.04.2026

Apache Airflow: JWT token still valid after logout

Kritisch · 9.1 CVE-2025-57735 >= 3.0.0, < 3.2.0 3.2.0
17.03.2026

Apache Airflow versions 3.1.0 through 3.1.7 missing authorization vulnerability in the Execution API's Human-in-the-Loop (HITL) endpoints that allows any authenticated task instance to read, approve,

Hoch · 8.1 CVE-2026-30911 >= 3.1.0, < 3.1.8 3.1.8
17.03.2026

Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.

Hoch · 7.5 CVE-2026-28779 >= 3.0.0, < 3.1.8 3.1.8
24.02.2026

Apache Airflow vulnerable to Code Injection in the web-server context via LogTemplate table

Hoch · 8.4 CVE-2024-56373 < 2.11.1 2.11.1

Mehr anzeigen (20) 20 von 66 angezeigt

Erkennen Sie Schwachstellen in Ihrer Anwendung

Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.

Anwendung verbinden