Vulnerability · low
Apache Airflow asset endpoints expose unreadable Dag IDs (CVE-2026-111454)
Tier C · Keep an eye on it – Check if you’re affected
Who’s exposed: Airflow deployments before 3.4.0 exposing the asset API
Tier C because: Hits tech teams
Reach
Attack
Damage
Fix
Popular tool
What to do
- Upgrade Apache Airflow to 3.4.0 or later
The Brief
- Apache Airflow asset API endpoints returned IDs of Dags that schedule, produce, or consume an asset without checking the caller's read permission.
- The issue is tracked as CVE-2026-111454 and rated low severity in the disclosure.
- Affected versions are Apache Airflow before 3.4.0.
Why it matters
Callers of the asset API could learn the IDs of Dags they are not permitted to read, which can reveal pipeline structure in multi-team Airflow deployments.
The checklist behind the tier
Checklist · 2 of 10 yes
| Yes | Hits tech teams | Airflow is a data orchestration platform run and built on by developer and data-ops teams. |
| No | Core infrastructure | Airflow is a single framework, not software nearly every team runs like OpenSSH or GitHub. |
| Yes | Popular tool | Apache Airflow is a widely used mainstream data pipeline orchestration tool. |
| No | Exploited in the wild | Open Source Security advisory describes the flaw only; it reports no observed attacks. |
| No | Public exploit | Open Source Security advisory describes the issue; it does not say exploit code or a PoC is published. |
| No | Remote, no login | Open Source Security: the caller's read permission is unchecked, implying an authenticated API caller is needed. |
| No | Full takeover | Open Source Security: the flaw returns Dag IDs, an information disclosure, not code execution or account takeover. |
| No | Secrets exposed | Open Source Security: only Dag IDs are returned; no credentials, keys or configs are said to be exposed. |
| No | Supply chain | Open Source Security describes a normal API authorization bug in legitimate code, not malicious code shipping. |
| No | No fix yet | Open Source Security: affected versions are before 3.4.0, implying a fix in 3.4.0; no source says unpatched. |
The official record
From CVE.org, CISA’s Known Exploited Vulnerabilities catalog, FIRST EPSS and the GitHub Advisory Database. Where these answer a checklist fact, they win over the reporting.
- Exploited
- Not in CISA’s exploited catalog
Timeline
Vulnerability disclosed on the oss-security mailing list by Rahul Vats
Open Source Security
CVE-2026-111454: Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read
Source
CVE-2026-111454: Apache Airflow: API: asset endpoints return scheduled/producing/consuming Dag IDs the caller cannot read ↗ Open Source Security · 2h ago
First seen · 1 source · Full story page · How tiers are decided