AIKIDO-2026-140277
airflow-code-editor is vulnerable to Incorrect Authorization
88
High Risk
This Affects:
airflow-code-editorTL;DR
The airflow-code-editor plugin guards its file- and repository-mutating routes with a DAG read permission instead of a write-level permission. A user holding only read access to DAGs can call the plugin routes to create, edit, or delete Python files in Airflow's live dags_folder. Because Airflow parses and executes files placed there, this lets a low-privilege user run arbitrary import-time code and act beyond their intended read-only role. The fix enforces write-level permission checks on the state-changing routes and gates git write operations behind an authorization check.
Who does this affect?
You are affected if you run a vulnerable version of the airflow-code-editor plugin with FAB/AppBuilder authentication and its default writable root pointed at Airflow's live dags_folder, and you grant users read-only DAG access who can reach the plugin's file and repository routes. Such a read-only user can create, edit, or delete DAG files without holding a write-level permission.
Background info
airflow-code-editor is vulnerable to Incorrect Authorization in versions 0.0.1 - 8.2.4.
How to fix this
Upgrade the airflow-code-editor library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.