AIKIDO-2026-879851
apache-airflow is vulnerable to Authorization Bypass
75
High Risk
This Affects:
apache-airflowTL;DR
The Backfill API authorizes a request against a caller-supplied Dag id whenever the backfill_id path segment fails to parse. The authorization dependency parses the id with int() while the route handler parses it as a non-negative int that accepts values int() rejects, so the two act on different Dags. A user with edit permission on any single Dag can read, pause, and cancel backfills belonging to other Dags and move their queued runs to failed. The fix parses the backfill id with the same type the routes declare.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range, expose the Backfill API, and grant users edit permission on at least one Dag.
Background info
apache-airflow is vulnerable to Authorization Bypass in versions 3.1.8 - 3.3.0.
How to fix this
Upgrade the apache-airflow library to the patch version.
Links
GitHub Release
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant