AIKIDO-2026-839557
apache-airflow is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
43
Medium Risk
This Affects:
apache-airflowTL;DR
Airflow's /assets/events endpoint returns asset events for every Dag in the deployment without filtering them to the Dags the caller is authorized to read. An authenticated user with asset read access can enumerate another team's Dag id, task id, run id, and event timestamps, and the endpoint's total_entries count leaks the existence of hidden Dags even without opening individual rows. This happens in any deployment that separates teams or tenants with per Dag access control, with no special configuration required. The fix scopes both the event query and its count to the Dags the caller may read.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you use per Dag access control to separate teams or tenants.
Background info
apache-airflow is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.1 - 3.3.1.
How to fix this
Upgrade the apache-airflow library to the patch version.
Links
Other
airflow.apache.org/docs/apache-airflow/3.3.2/release_notes.htmllists.apache.org/thread/rx5lg86l0qkjl2s7dtmpqxjq0xplr4fyopenwall.com/lists/oss-security/2026/09/21/3
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.