Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team, unlike every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global one by that field -- the Keycloak auth manager, for example, checks the `DAG` resource instead of `DAG:<team>` -- so the team-scoped permission that should gate the request was never consulted. In a deployment running multi-team mode with a team-aware auth manager, an authenticated user in one team could trigger Dag runs belonging to another team, supplying their own `dag_run_id` and `conf`, and could read another team's XCom values. Deployments using the FAB auth manager are unaffected, as it has no multi-team support. Users are advised to upgrade to apache-airflow 3.3.1 or later, which resolves the Dag's team at both sites.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the
    XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team, unlike
    every other authorization site. A team-aware auth manager distinguishes a team-scoped Dag from a global
    one by that field -- the Keycloak auth manager, for example, checks the `DAG` resource instead of
    `DAG:<team>` -- so the team-scoped permission that should gate the request was never consulted. In a
    deployment running multi-team mode with a team-aware auth manager, an authenticated user in one team could
    trigger Dag runs belonging to another team, supplying their own `dag_run_id` and `conf`, and could read
    another team's XCom values. Deployments using the FAB auth manager are unaffected, as it has no multi-team
    support. Users are advised to upgrade to apache-airflow 3.3.1 or later, which resolves the Dag's team at
    both sites. (CVE-2026-68971)

ID	Name	Product	Family	Type	Severity
472740	Echo: apache-airflow: security update to 3.3.1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
472740	Echo: apache-airflow: security update to 3.3.1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
472059	SCA: security update for apache-airflow (GHSA-5247-m8w9-2v4m)	Tenable Cloud Security	SCA Checks	Local	medium
472059	SCA: security update for apache-airflow (GHSA-5247-m8w9-2v4m)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2026-68971

medium

Tenable Plugins

medium

medium

medium

medium