CLEANSTART-2026-UI77772 Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team,...

Security vulnerability affects the airflow-3 package. Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site...

CLEANSTART-2026-SG17271 Before apache-airflow 3

Security vulnerability affects the airflow-3 package. Before apache-airflow 3...

CLEANSTART-2026-UQ32467 Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables` and `PATCH /api/v2/...

Security vulnerability affects the airflow-3 package. Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections...

CLEANSTART-2026-SQ68931 In Apache Airflow before 3

Security vulnerability affects the airflow-3 package. In Apache Airflow before 3...

CLEANSTART-2026-UV14417 Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI

Security vulnerability affects the airflow-3 package. Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI...

CLEANSTART-2026-CG47796 Apache Airflow's secrets masker did not mask `var

Security vulnerability affects the airflow-3 package. Apache Airflow's secrets masker did not mask var...

CLEANSTART-2026-NO84858 Security fix for CVE-2026-49265 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9, airflow-3 3.2.2-r8

CVE-2026-49265 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XI09971 Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and `AIRFLOW__WORKERS__SECRETS_BACKEND_KWARG__SECRET...

Security vulnerability affects the airflow-3 package. The Config API in Apache Airflow surfaced per-key secrets-backend overrides environment variables like AIRFLOWSECRETSBACKENDKWARGSECRETID and AIRFLOWWORKERSSECRETSBACKENDKWARGSECRETID as synthetic config options whose option names were not in...

CLEANSTART-2026-NZ97420 Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI

Security vulnerability affects the airflow-3 package. Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI...

CLEANSTART-2026-ZG38480 Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope

Security vulnerability affects the airflow-3 package. Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope...

CLEANSTART-2026-CM94028 Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read

Security vulnerability affects the airflow-3 package. Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read...

CLEANSTART-2026-VP80273 bug in `BaseSerialization

Security vulnerability affects the airflow-3 package. A bug in BaseSerialization...

CLEANSTART-2026-TQ39648 Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `*_...

Security vulnerability affects the airflow-3 package. The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based shouldhidevalueforkey check which triggers on secret-suffixed key names like password / token / secret could not fire for...

CLEANSTART-2026-QJ23828 Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie

Security vulnerability affects the airflow-3 package. Apache Airflow: the Core API logout endpoint revokes only a session token presented as the token cookie...

CLEANSTART-2026-ZO32580 Apache Airflow's XCom `GET /api/v2/{

Security vulnerability affects the airflow-3 package. Apache Airflow's XCom GET /api/v2/...

CLEANSTART-2026-IM25560 Security fix for GHSA-3hv7-mjh2-fv65 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9

GHSA-3hv7-mjh2-fv65 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WT65883 bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep

Security vulnerability affects the airflow-3 package. A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep...

PT-2026-117871

Security vulnerability affects the airflow-3 package. Apache Airflow's asset materialization endpoint POST /api/v2/assets/asset id/materialize and the XCom result check on wait dag run until finished authorized the target Dag without its team, unlike every other authorization site...

PT-2026-117855

Security vulnerability affects the airflow-3 package. In Apache Airflow before 3...

PT-2026-117817

Security vulnerability affects the airflow-3 package. Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the backfill id path segment failed to parse...