Beveiligingsadvies

CVE-2026-26929

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-17 10:54:05

Laatst bijgewerkt 2026-03-17 15:40:38

Toegewezen door apache

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "~" (wildcard for all DAGs). As a result, version metadata of DAGs that the requester is not authorized to access is returned. Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves this issue.

← Alle CVE's bekijken Bekijk op cve.org ↗