CVE-2026-49296
Description
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET /api/v2/dagSources/{dag_id}` — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not authorized to read, bypassing per-DAG read authorization. Deployments that co-locate multiple Dags in a single file and rely on per-DAG access control to limit source visibility are affected; single-Dag-per-file deployments are not. Upgrade to apache-airflow 3.3.0 or later.
How to fix
- apache airflow3.3.0 or later
- apache-airflow3.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache airflow | v < 3.3.0 | 3.3.0 |
| apache-airflowPyPI | v < 3.3.0 | 3.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.