CVE-2026-34538: Apache Airflow Authorization Bypass in DagRun Wait Endpoint
Summary
CVE-2026-34538: Apache Airflow has an authorization bypass in DagRun wait endpoint. Affects apache-airflow versions >= 3.0.0, < 3.2.0. Fixed in 3.2.0. How to fix ↓
Also tracked for
- airflow · Bitnami
The same CVE-2026-34538 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Airflow is an open-source platform designed to programmatically author, schedule, and monitor workflows. It allows users to define workflows as Directed Acyclic Graphs (DAGs) and provides a rich user interface to visualize and manage these workflows. The platform employs Role-Based Access Control (RBAC) to manage permissions, ensuring that users can only access resources they are authorized to. However, a vulnerability has been identified in versions 3.0.0 through 3.1.8 that compromises this access control model.
Vulnerability Detail
The vulnerability in Apache Airflow arises from an authorization bypass in the DagRun wait endpoint. This endpoint improperly returns XCom result values to users who possess only DAG Run read permissions, such as those assigned the Viewer role. This behavior contradicts the intended security model, which classifies XCom as a separate protected resource. The Viewer role is designed to be read-only, allowing users to inspect DAGs without accessing sensitive execution results. As a result, unauthorized users may gain access to sensitive data, leading to potential information leaks.
How To Fix
Latest published version: 3.3.2 as of 22 Oct 2026
pip install --upgrade "apache-airflow==3.3.2"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
3.2.0
This is the first release that contains the fix.
pip install --upgrade "apache-airflow==3.2.0"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can restrict access to the DagRun wait endpoint by modifying permissions for the Viewer role or by implementing additional access controls until the upgrade can be performed. However, it is strongly recommended to apply the patch as soon as possible.
Conclusion
The authorization bypass vulnerability in Apache Airflow's DagRun wait endpoint poses a significant risk by allowing unauthorized access to sensitive execution results. Users are strongly advised to upgrade to version 3.2.0 or later to mitigate this risk. For those unable to upgrade immediately, implementing temporary access restrictions is recommended.
See every vulnerability recorded for apache-airflow →
FAQ
CVE-2026-34538 is a vulnerability in Apache Airflow that allows unauthorized access to sensitive XCom result values through an authorization bypass in the DagRun wait endpoint.
Apache Airflow versions 3.0.0 through 3.1.8 are affected by this vulnerability.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
If an immediate upgrade is not possible, consider restricting access to the DagRun wait endpoint or modifying permissions for the Viewer role as a temporary workaround.
The CVSS score of this vulnerability is 6.5, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for apache-airflow.
