CVE-2026-68971

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.1

Description In deployments using multi-team mode with a team-aware auth manager, the asset materialization endpoint POST /api/v2/assets/{asset id}/materialize and the XCom result check on wait dag run until finished authorize the target Dag without verifying its team. This occurs because the auth manager checks the DAG resource instead of the DAG:<team> resource, bypassing team-scoped permissions. Consequently, an authenticated user from one team can trigger Dag runs belonging to another team by providing their own dag run id and conf, and can read XCom values from another team. Deployments using the FAB auth manager are not affected.

Recommendations Upgrade to version 3.3.1 or later.