CVE-2026-40690 json
Apache Airflow: Assets graph view bypasses DAG level access control displaying unrelated topologies and all DAGs names to unauthorized users
published 2026-04-24 6 mo ago modified 2026-11-03 6 d ago also BIT-airflow-2026-40690 , EUVD-2026-25419 , GHSA-w7rc-q6cm-f5gm , PYSEC-2026-2356
- cvss
- 4.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 29%
- public exploits
- 0
- none known
Summary
The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope.
Users are recommended to upgrade to version 3.2.1, which fixes this issue.
Patch / fix
- pypi apache-airflow 3.2.1rc1
- bitnami airflow 3.2.1
- Apache Software Foundation Apache Airflow 3.0.0, 3.2.1
- github.com/apache/airflow@cf3452d commit
- github.com/apache/airflow#65273 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 6 mo ago
Exploit prediction
0.35% chance of exploitation in the next 30 days, higher than 29% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| GitHub | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| CNA | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| OSV | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow | <3.2.1rc1 |
3.2.1rc1 |
| bitnami | airflow | <3.2.1 |
3.2.1 |
Affected products
- Apache Software Foundation Apache Airflow
Classification
- Weakness
-
- CWE-1220 Insufficient Granularity of Access Control
References
-
github.com
/apache/airflow/pull/65273
patch, web, issue-tracking
-
github.com
/apache/airflow/commit/cf3452d76e2ef5a8bae247f9fc90c759ff9df02f
web
-
lists.apache.org
/thread/bqt7y4g2cpj396b0sd20lv510ff19ndl
vendor-advisory, web, mailing-list, advisory
-
openwall.com
/lists/oss-security/2026/04/24/4
web, mailing-list, third-party-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-40690
advisory, web
-
github.com
/apache/airflow
package
-
pypi.org
/project/apache-airflow
package
-
github.com
/advisories/GHSA-w7rc-q6cm-f5gm
advisory
Sources
- CVE List CVE-2026-40690
- GitHub Advisory GHSA-w7rc-q6cm-f5gm
- NVD CVE-2026-40690
- OSV BIT-airflow-2026-40690
- OSV PYSEC-2026-2356
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.