AIKIDO-2026-808913
apache-airflow-core is vulnerable to Incorrect Authorization
54
CVE Score
Medium
Incorrect Authorization
TL;DR
Airflow's asset queued-events DELETE endpoints check the caller's permission on the Dag resource axis instead of the Asset resource axis the endpoint actually operates on. A caller with Dag-level permissions but no rights over the affected asset can still delete that asset's queued events. This lets queued-event data be deleted outside the authorization boundary the endpoint is supposed to enforce. The fix checks the caller's permission against the Asset resource axis.
How do I fix this?
Upgrade the apache-airflow-core and/or the apache-airflow library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and use per resource authorization to restrict which users can manage a given asset's queued events.
Package
Versions
0.0.1 - 3.3.1
Fixed in 3.3.2Background info
apache-airflow-core is vulnerable to Incorrect Authorization in versions 0.0.1 - 3.3.1.
Links
Other
github.com/apache/airflow/blob/3.3.2/RELEASE_NOTES.rst
lists.apache.org/thread/f2ngj296z48b3x14ss3pgbs41lbnlgmpopenwall.com/lists/oss-security/2026/09/18/1
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.