Security Advisory

CVE-2026-32228

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-18 06:19:47
Last updated 2026-04-20 15:54:05
Assigner apache
CVSS score not scored
State PUBLISHED

Description

UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.