NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#cve-2026-75157

0 stories this week · 0 this month · 1 in 6 months · mostly security

Stories per day · 30 days

1 stories, newest first · one card per story

oss-securitySep 18, 2026

CVE-2026-75157: Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

Apache Airflow before 3.3.2 lets any user with Dag read permission delete queued asset events, suppressing asset-triggered scheduling (CVE-2026-75157).

access-control apache-airflow

Stories tagged #cve-2026-75157

CVE-2026-75157: Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)