CVE-2026-75158: Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter
Apache Airflow before 3.3.2 lets asset readers enumerate events for every Dag via CVE-2026-75158.
1 stories, newest first · one card per story
Apache Airflow before 3.3.2 lets asset readers enumerate events for every Dag via CVE-2026-75158.
Today 1.6K readers · 2.5K views · 778 reads · all time 189K views