AIKIDO-2026-839557
apache-airflow is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
43
CVE Score
Medium
Exposure of Sensitive Information to an Unauthorized Actor
TL;DR
Airflow's /assets/events endpoint returns asset events for every Dag in the deployment without filtering them to the Dags the caller is authorized to read. An authenticated user with asset read access can enumerate another team's Dag id, task id, run id, and event timestamps, and the endpoint's total_entries count leaks the existence of hidden Dags even without opening individual rows. This happens in any deployment that separates teams or tenants with per Dag access control, with no special configuration required. The fix scopes both the event query and its count to the Dags the caller may read.
How do I fix this?
Upgrade the apache-airflow library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you use per Dag access control to separate teams or tenants.
Package
Versions
0.0.1 - 3.3.1
Fixed in 3.3.2Background info
apache-airflow is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.1 - 3.3.1.
Links
Other
airflow.apache.org/docs/apache-airflow/3.3.2/release_notes.htmllists.apache.org/thread/rx5lg86l0qkjl2s7dtmpqxjq0xplr4fyopenwall.com/lists/oss-security/2026/09/21/3
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.