MEDIUM4.3

PYSEC-2026-2356

Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions

Quick fix

PYSEC-2026-2356 — apache-airflow: upgrade to the fixed version with the command below.

pip install --upgrade 'apache-airflow>=3.2.1rc1'

Details

The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope.

Users are recommended to upgrade to version 3.2.1, which fixes this issue.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/apache-airflow

Introduced in: 0Fixed in: 3.2.1rc1

Fixpip install --upgrade 'apache-airflow>=3.2.1rc1'

References

https://nvd.nist.gov/vuln/detail/CVE-2026-40690[ADVISORY]
https://github.com/apache/airflow/pull/65273[WEB]
https://github.com/apache/airflow/commit/cf3452d76e2ef5a8bae247f9fc90c759ff9df02f[WEB]
https://github.com/apache/airflow[PACKAGE]
https://lists.apache.org/thread/bqt7y4g2cpj396b0sd20lv510ff19ndl[WEB]
http://www.openwall.com/lists/oss-security/2026/04/24/4[WEB]
https://pypi.org/project/apache-airflow[PACKAGE]
https://github.com/advisories/GHSA-w7rc-q6cm-f5gm[ADVISORY]