CVE-2024-26280

Apache Airflow, versions before 2.8.2 , contains an information disclosure vulnerability due to overly broad default permissions within the audit logs. This flaw allows authenticated Ops and Viewers users to access sensitive information they are not authorized to see, such as dag names and userna...