Database/Control plane, storage & DevOps
Apache Airflow: asset materialize permission lets a user trigger DAGs they have no access to
Impact
A UI or API user holding only the asset materialize permission can trigger DAG runs for DAGs they are not authorized to see or run. On a fleet where Airflow drives training, fine-tuning and batch inference pipelines, that means a restricted user can launch another team's jobs - consuming GPU hours, writing to datasets and model stores they do not own, and running code under the permissions of the worker that executes the DAG. The authorization check belongs to the materialize path, so the usual per-DAG access control does not contain it.
Who can reach it
Authenticated Airflow user with the asset materialize permission, over the web UI or REST API. No DAG-level access and no administrative role required.
What to do
Upgrade to Apache Airflow 3.2.0, which fixes the check, and restart the webserver/API server and scheduler - a control-plane daemon restart, no node drain and no impact on GPU nodes themselves. Until then, review who holds asset materialize and remove it from roles that should not be able to start pipelines, and audit recent DAG runs for triggers that did not come from their owning team.
References
Related entries
- Automated Logic WebCTRL / i-Vu server and controllers, BACnet transport trust: This is the vendor formally concedingCVE-2026-32666 · Automated Logic WebCTRL / i-Vu server and controllers, BACnet transport trustHigh
- Apache Tomcat: Missing encryption of sensitive data introduced by the CVE-2026-29146 fixCVE-2026-34486 · Apache TomcatHigh
- Apache Airflow: bulk Task Instance API authorizes the URL dag_id but acts on the body dag_idCVE-2026-41084 · Apache Airflow (bulk Task Instances API, PATCH/DELETE authorization)High
- JFrog Artifactory: internal anonymous-user token returned to unauthenticated callersCVE-2026-42018 · JFrog Artifactory (anonymous-user token disclosure)High
- Prometheus: Azure AD remote-write client secret served in plaintext from the /-/config endpointCVE-2026-42151 · Prometheus (Azure AD remote-write OAuth client_secret in /-/config)High
- Prometheus: unvalidated snappy decoded length on /api/v1/read lets a small request exhaust server memoryCVE-2026-42154 · Prometheus (/api/v1/read snappy decompression length handling)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.