AIKIDO-2026-140277

airflow-code-editor is vulnerable to Incorrect Authorization

Incorrect AuthorizationGHSA-h6wx-5586-3jg7 Published Today

High Risk

This Affects:

airflow-code-editor

0.0.1 - 8.2.4

Fixed in 8.3.0

Are you affected? Scan for Free

TL;DR

The airflow-code-editor plugin guards its file- and repository-mutating routes with a DAG read permission instead of a write-level permission. A user holding only read access to DAGs can call the plugin routes to create, edit, or delete Python files in Airflow's live dags_folder. Because Airflow parses and executes files placed there, this lets a low-privilege user run arbitrary import-time code and act beyond their intended read-only role. The fix enforces write-level permission checks on the state-changing routes and gates git write operations behind an authorization check.

Who does this affect?

You are affected if you run a vulnerable version of the airflow-code-editor plugin with FAB/AppBuilder authentication and its default writable root pointed at Airflow's live dags_folder, and you grant users read-only DAG access who can reach the plugin's file and repository routes. Such a read-only user can create, edit, or delete DAG files without holding a write-level permission.