1. Home
  2. Vulnerabilities
  3. CVE-2026-68971
6.5
MEDIUM CVSS 3.1
CVE-2026-68971
Apache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpoints
Overview
Description

Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global one by that field -- the Keycloak auth manager, for example, checks the `DAG` resource instead of `DAG:<team>` -- so the team-scoped permission that should gate the request was never consulted. In a deployment running multi-team mode with a team-aware auth manager, an authenticated user in one team could trigger Dag runs belonging to another team, supplying their own `dag_run_id` and `conf`, and could read another team's XCom values. Deployments using the FAB auth manager are unaffected, as it has no multi-team support. Users are advised to upgrade to apache-airflow 3.3.1 or later, which resolves the Dag's team at both sites.

Details
INFO

Published Date :

Aug. 12, 2026, 4:17 p.m.

Last Modified :

Oct. 24, 2026, 4:10 p.m.

Remotely Exploit :

Yes !

Source :

[email protected]
Impact
Affected Products

The following products are affected by CVE-2026-68971 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Apache airflow
: Total Affected Vendor : 1 | Products : 1
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and displays CVSS scores from various sources for each CVE.
Score Version Severity Vector Exploitability Score Impact Score Source
CVSS 134c704f-9b21-4f2e-91b3-4a467353bcc0
CVSS 3.1 MEDIUM 134c704f-9b21-4f2e-91b3-4a467353bcc0
Solution
Upgrade Apache Airflow to resolve improper access control for assets and XComs.
  • Upgrade Apache Airflow to version 3.3.1 or later.
  • Ensure the authentication manager correctly scopes DAG permissions.
  • Verify access controls for multi-team environments.
  • Review team-based authorization configurations.
References
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2026-68971.

URL Resource
https://github.com/apache/airflow/pull/70893 Issue Tracking Patch
https://lists.apache.org/thread/kfxqqwgojdjdnt6bxg3ord4y41y334fo Mailing List
http://www.openwall.com/lists/oss-security/2026/08/12/15 Mailing List
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-68971 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-68971 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-68971 vulnerability anywhere in the article.

Results are limited to the first 20 news articles due to potential performance issues.

The following table lists the changes that have been made to the CVE-2026-68971 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Translated by [email protected]

    Oct. 24, 2026

    Action Type Old Value New Value
    Changed Translation Title: Apache Airflow de Apache Software Foundation, Description: El endpoint de materialización de activos de Apache Airflow (“POST /api/v2/assets/{asset_id}/materialize”) y la verificación de resultados de XCom en “wait_dag_run_until_finished” autorizó el Dag objetivo sin su equipo, a diferencia de cualquier otro sitio de autorización. Un gestor de autorización consciente del equipo distingue un Dag con ámbito de equipo de uno global por ese campo -- el gestor de autorización de Keycloak, por ejemplo, verifica el recurso “DAG” en lugar de “DAG:[team]” -- por lo que el permiso con ámbito de equipo que debería restringir la solicitud nunca fue consultado. En una implementación ejecutyo el modo multi-equipo con un gestor de autorización consciente del equipo, un usuario autenticado en un equipo podría activar ejecuciones de Dag pertenecientes a otro equipo, suministryo su propio “dag_run_id” y “conf”, y podría leer los valores XCom de otro equipo. Las implementaciones que utilizan el gestor de autorización FAB no se ven afectadas, ya que no tiene soporte multi-equipo. Se aconseja a los usuarios actualizar a apache-airflow 3.3.1 o posterior, lo que resuelve el equipo del Dag en ambos sitios. Title: Apache Airflow de Apache Software Foundation, Description: El endpoint de materialización de activos de Apache Airflow (“POST /api/v2/assets/{asset_id}/materialize”) y la verificación de resultados de XCom en “wait_dag_run_until_finished” autorizó el Dag objetivo sin su equipo, a diferencia de cualquier otro sitio de autorización. Un gestor de autorización consciente del equipo distingue un Dag con ámbito de equipo de uno global por ese campo -- el gestor de autorización de Keycloak, por ejemplo, verifica el recurso “DAG” en lugar de “DAG:[team]” -- por lo que el permiso con ámbito de equipo que debería restringir la solicitud nunca fue consultado. En una implementación ejecutyo el modo multi-equipo con un gestor de autorización consciente del equipo, un usuario autenticado en un equipo podría activar ejecuciones de Dag pertenecientes a otro equipo, suministryo su propio “dag_run_id” y “conf”, y podría leer los valores XCom de otro equipo. Las implementaciones que utilizan el gestor de autorización FAB no se ven afectadas, ya que no tiene soporte multi-equipo. Se aconseja a los usuarios actualizar a apache-airflow 3.3.1 o posterior, lo que resuelve el equipo del Dag en ambos sitios.
  • CVE Translated by [email protected]

    Oct. 23, 2026

    Action Type Old Value New Value
    Added Translation Title: Apache Airflow de Apache Software Foundation, Description: El endpoint de materialización de activos de Apache Airflow (“POST /api/v2/assets/{asset_id}/materialize”) y la verificación de resultados de XCom en “wait_dag_run_until_finished” autorizó el Dag objetivo sin su equipo, a diferencia de cualquier otro sitio de autorización. Un gestor de autorización consciente del equipo distingue un Dag con ámbito de equipo de uno global por ese campo -- el gestor de autorización de Keycloak, por ejemplo, verifica el recurso “DAG” en lugar de “DAG:[team]” -- por lo que el permiso con ámbito de equipo que debería restringir la solicitud nunca fue consultado. En una implementación ejecutyo el modo multi-equipo con un gestor de autorización consciente del equipo, un usuario autenticado en un equipo podría activar ejecuciones de Dag pertenecientes a otro equipo, suministryo su propio “dag_run_id” y “conf”, y podría leer los valores XCom de otro equipo. Las implementaciones que utilizan el gestor de autorización FAB no se ven afectadas, ya que no tiene soporte multi-equipo. Se aconseja a los usuarios actualizar a apache-airflow 3.3.1 o posterior, lo que resuelve el equipo del Dag en ambos sitios.
  • CVE Modified by [email protected]

    Sep. 16, 2026

    Action Type Old Value New Value
    Added Affected Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/68xxx/CVE-2026-68971.json">CVE-2026-68971</a>
    Added Reference https://github.com/apache/airflow/pull/70893
    Added Reference https://lists.apache.org/thread/kfxqqwgojdjdnt6bxg3ord4y41y334fo
    Removed Reference https://github.com/apache/airflow/pull/70893
    Removed Reference https://lists.apache.org/thread/kfxqqwgojdjdnt6bxg3ord4y41y334fo
    Removed Reference Type https://github.com/apache/airflow/pull/70893 Types: Issue Tracking, Patch
    Removed Reference Type https://lists.apache.org/thread/kfxqqwgojdjdnt6bxg3ord4y41y334fo Types: Mailing List
  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Sep. 16, 2026

    Action Type Old Value New Value
    Added Reference http://www.openwall.com/lists/oss-security/2026/08/12/15
    Removed Reference http://www.openwall.com/lists/oss-security/2026/08/12/15
    Removed Reference Type http://www.openwall.com/lists/oss-security/2026/08/12/15 Types: Mailing List
  • Initial Analysis by [email protected]

    Aug. 13, 2026

    Action Type Old Value New Value
    Added CPE Configuration OR *cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:* versions up to (excluding) 3.3.1
    Added Reference Type Apache Software Foundation: https://github.com/apache/airflow/pull/70893 Types: Issue Tracking, Patch
    Added Reference Type Apache Software Foundation: https://lists.apache.org/thread/kfxqqwgojdjdnt6bxg3ord4y41y334fo Types: Mailing List
    Added Reference Type CVE: http://www.openwall.com/lists/oss-security/2026/08/12/15 Types: Mailing List
  • CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Aug. 13, 2026

    Action Type Old Value New Value
    Added CVSS V3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    Added SSVC {'id': 'CVE-2026-68971', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'partial'}], 'version': '2.0.3', 'timestamp': '2026-08-13T12:04:55.035132Z'}
  • CVE Modified by af854a3a-2127-422b-91ae-364da2661108

    Aug. 12, 2026

    Action Type Old Value New Value
    Added Reference http://www.openwall.com/lists/oss-security/2026/08/12/15
  • New CVE Received by [email protected]

    Aug. 12, 2026

    Action Type Old Value New Value
    Added Affected [{'vendor': 'Apache Software Foundation', 'product': 'Apache Airflow', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '3.3.1', 'versionType': 'semver'}], 'packageName': 'apache-airflow', 'collectionURL': 'https://pypi.python.org', 'defaultStatus': 'unaffected'}]
    Added Description Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global one by that field -- the Keycloak auth manager, for example, checks the `DAG` resource instead of `DAG:<team>` -- so the team-scoped permission that should gate the request was never consulted. In a deployment running multi-team mode with a team-aware auth manager, an authenticated user in one team could trigger Dag runs belonging to another team, supplying their own `dag_run_id` and `conf`, and could read another team's XCom values. Deployments using the FAB auth manager are unaffected, as it has no multi-team support. Users are advised to upgrade to apache-airflow 3.3.1 or later, which resolves the Dag's team at both sites.
    Added CWE CWE-862
    Added Reference https://github.com/apache/airflow/pull/70893
    Added Reference https://lists.apache.org/thread/kfxqqwgojdjdnt6bxg3ord4y41y334fo
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CVSS
Vulnerability Scoring Details
Base CVSS Score: 6.5
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact