⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2026-32228

HIGH · 7.5 CVSS Gepubliceerd: 18-04-2026 CWE-863

Beschrijving

UI / API User with asset materialize permission could trigger dags they had no access to.
Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.

Vendors

Apache

Affected products

Airflow

References

github.com
lists.apache.org
www.openwall.com