CVE-2026-49296
published 2026-07-07CVE-2026-49296: Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET…
PriorityP342medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.60%
44.6th percentile
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET /api/v2/dagSources/{dag_id}` — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not authorized to read, bypassing per-DAG read authorization. Deployments that co-locate multiple Dags in a single file and rely on per-DAG access control to limit source visibility are affected; single-Dag-per-file deployments are not. Upgrade to apache-airflow 3.3.0 or later.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | airflow | < 3.3.0 | 3.3.0 |
| apache_software_foundation | apache_airflow | >= 3.0.0 < 3.3.0 | 3.3.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Apache Airflow up to 3.2.x DAG Source api/v2/dagSources access control (WID-SEC-2026-2223)
vuldb·2026-07-08·CVSS 6.5
CVE-2026-49296 [MEDIUM] Apache Airflow up to 3.2.x DAG Source api/v2/dagSources access control (WID-SEC-2026-2223)
A vulnerability categorized as problematic has been discovered in Apache Airflow up to 3.2.x. This issue affects some unknown processing of the file api/v2/dagSources of the component DAG Source Handler. Such manipulation leads to improper access controls.
This vulnerability is uniquely identified as CVE-2026-49296. The attack can be launched remotely. No exploit exists.
GHSA
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file.
ghsa_unreviewed·2026-07-07
CVE-2026-49296 [MEDIUM] CWE-639 Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file.
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET /api/v2/dagSources/{dag_id}` — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not authorized to read, bypassing per-DAG read authorization. Deployments that co-locate multiple Dags in a single file and rely on per-DAG access control to limit source visibility are affected; single-Dag-per-file deployments are not. Upgrade to apache-airflow 3.3.0 or later.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-07
Published