AIKIDO-2026-495217

TL;DR

The asset materialization endpoint and the XCom result check on wait_dag_run_until_finished authorize the target Dag without its team, unlike other authorization sites. A team-aware auth manager therefore never consults the team-scoped permission that should gate the request. In multi-team mode an authenticated user in one team can trigger another team's Dag runs with their own configuration and read another team's XCom values. The fix resolves the Dag's team at both sites.