← Database

CVE-2026-32228

HIGH CVSS: 7.5 Published: 2026-04-18 Modified: 2026-06-17

Description

UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.

Affected Platforms

Apache Airflow

Weakness Type

CWE-863

References