AIKIDO-2026-808913
apache-airflow-core is vulnerable to Incorrect Authorization
54
Medium Risk
This Affects:
apache-airflow-coreTL;DR
Airflow's asset queued-events DELETE endpoints check the caller's permission on the Dag resource axis instead of the Asset resource axis the endpoint actually operates on. A caller with Dag-level permissions but no rights over the affected asset can still delete that asset's queued events. This lets queued-event data be deleted outside the authorization boundary the endpoint is supposed to enforce. The fix checks the caller's permission against the Asset resource axis.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and use per resource authorization to restrict which users can manage a given asset's queued events.
Background info
apache-airflow-core is vulnerable to Incorrect Authorization in versions 0.0.1 - 3.3.1.
How to fix this
Upgrade the apache-airflow-core and/or the apache-airflow library to the patch version.
Links
Other
github.com/apache/airflow/blob/3.3.2/RELEASE_NOTES.rst
lists.apache.org/thread/f2ngj296z48b3x14ss3pgbs41lbnlgmpopenwall.com/lists/oss-security/2026/09/18/1
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.