Executive brief
Apache Airflow, a platform used to schedule and monitor workflows, contains a security flaw in its bulk task management interface. This vulnerability allows a user who has permission to edit one workflow (DAG) to modify or delete tasks in other workflows they should not have access to. This could lead to unauthorized changes in business operations, data processing disruptions, or the bypass of security boundaries between different teams using the same Airflow instance.
Technical details
An authorization bypass (CWE-639) exists in Apache Airflow's bulk Task Instances API endpoints (PATCH/DELETE `/api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances`). The vulnerability stems from the API evaluating authorization against the `dag_id` provided in the URL path, while performing operations on `dag_id` and `dag_run_id` values extracted from the request body. An authenticated attacker with 'edit' permissions on at least one DAG can exploit this by supplying an authorized DAG ID in the URL and target DAG IDs in the request body. This allows for cross-DAG mutation of task instance states, bypassing intended RBAC isolation. The issue is resolved in version 3.2.2.
Affected products
- Apache Software Foundation Apache Airflow >= 3.2.0, < 3.2.2
Timeline
- 2026-03-27: other: Fix pull request opened
- 2026-04-04: patched: Fix merged into main branch
- 2026-05-31: disclosed: Mailing list disclosure
- 2026-06-01: advisory: GitHub Advisory and NVD publication