Security vulnerability affects the airflow-3 package. Apache Airflow's asset materialization endpoint (POST /api/v2/assets/{asset id}/materialize) and the XCom result check on wait dag run until finished authorized the target Dag without its team, unlike every other authorization site.