HIGHCVSS 7.5

CVE-2026-32228

CVE-2026-32228 updated by NVD

Modified: 2026-11-05
Sources: nvd

Summary

UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-32228

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.