CVE-2026-24098 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors g…
Medium CVSS: 6.5

CVE-2026-24098

Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Dags they did not have access to.

Users are advised to upgrade to 3.1.7 or later, which resolves this issue
Vendor
Apache
Product
Airflow
CWE
CWE-200
Yayın Tarihi
2026-02-09 11:16:14
Güncelleme
2026-03-11 13:51:59
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-200 Airflow MEDIUM Apache 2026

Referanslar

https://github.com/apache/airflow/pull/60801 https://lists.apache.org/thread/nx96435v77xdst7ls5lk57kqvqyj095x http://www.openwall.com/lists/oss-security/2026/02/09/3