{"id":"CVE-2026-111453","kind":"vulnerability","aliases":["CVE-2026-111453"],"related":[],"title":"Apache Airflow: asset queued-event deletion ignores Dag edit permission, suppressing other Dags' runs","description":"Apache Airflow's API endpoint for deleting an asset's queued events checked Dag edit permission against the `dag_id` query parameter, but deleted the queued events of every Dag the caller could read. An authenticated user with edit permission on one Dag and read access to others could suppress asset-triggered runs of Dags they cannot edit. This is an incomplete fix for CVE-2026-75157: users who upgraded to apache-airflow 3.3.2 for that fix are still affected and should upgrade to apache-airflow 3.4.0 or later.","summary":"An authenticated Airflow user with edit rights on one Dag can delete queued asset events for Dags they can only read. This suppresses asset-triggered runs of Dags they cannot edit.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["apache-airflow","python","runtime","self-hosted"],"not_affected_if":["auth-disabled-not-exposed","single-tenant-trusted-users"],"how_to_check":"- Check the installed version with `airflow version` or `pip show apache-airflow`, and compare it to the fixed version below.\n- Look for Airflow API use of the asset queued-events delete endpoint by users who hold only Dag edit permission.","fix":"- apache-airflow `3.4.0` or later (3.3.2 is not enough; it fixed CVE-2026-75157 only)","status":"open","published_at":"2026-11-09T10:17:04+00:00","first_seen_at":"2026-11-09T10:25:48+00:00","triaged_at":"2026-11-09T10:26:49+00:00","updated_at":"2026-11-09T10:26:49+00:00","category":"runtime","confidence":0.7,"triage":{"at":"2026-11-09T10:26:49Z","model":"claude-haiku-5-5","output":{"fix":"- apache-airflow `3.4.0` or later (3.3.2 is not enough; it fixed CVE-2026-75157 only)","reach":"network","title":"Apache Airflow: asset queued-event deletion ignores Dag edit permission, suppressing other Dags' runs","impact":"low","summary":"An authenticated Airflow user with edit rights on one Dag can delete queued asset events for Dags they can only read. This suppresses asset-triggered runs of Dags they cannot edit.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["apache-airflow","self-hosted","python"],"confidence":0.7,"fix_status":"available","needs_auth":"yes","worst_case":"authenticated user suppresses other Dags' asset-triggered runs","analyst_note":"","how_to_check":"- Check the installed version with `airflow version` or `pip show apache-airflow`, and compare it to the fixed version below.\n- Look for Airflow API use of the asset queued-events delete endpoint by users who hold only Dag edit permission.","plain_action":"","product_name":"","needs_analyst":false,"not_affected_if":["single-tenant-trusted-users","auth-disabled-not-exposed"],"who_is_affected":"Deployments of Apache Airflow where some users have Dag edit permission on at least one Dag and read access to others. Users who upgraded to 3.3.2 for CVE-2026-75157 are still affected. unknown whether single-user or fully-trusted deployments are exposed beyond this.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000751,"input_tokens":4630,"output_tokens":577,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-111453':18A,21A '-2026':17A,20A,128C '-75157':129C '3.3.2':137C '3.4.0':151C 'access':107C 'affect':143C 'airflow':2A,24B,32B,63C,136C,150C 'apach':1A,23B,62C,135C,149C 'apache-airflow':22B,134C,148C 'api':65C 'asset':3A,43B,54B,70C,113C 'asset-trigg':53B,112C 'authent':31B,97C 'caller':93C 'cannot':60B,119C 'check':74C 'could':94C,110C 'cve':16A,19A,127C 'dag':9A,14A,39B,46B,58B,75C,80C,91C,104C,117C 'delet':7A,41B,68C,85C 'edit':10A,35B,61B,76C,100C,120C 'endpoint':66C 'event':6A,44B,73C,88C 'everi':90C 'fix':125C,140C 'host':29B 'id':81C 'ignor':8A 'incomplet':124C 'later':153C 'one':38B,103C 'other':109C 'paramet':83C 'permiss':11A,77C,101C 'python':25B 'queri':82C 'queu':5A,42B,72C,87C 'queued-ev':4A 'read':50B,95C,106C 'right':36B 'run':15A,56B,115C 'runtim':26B 'self':28B 'self-host':27B 'still':142C 'suppress':12A,52B,111C 'trigger':55B,114C 'upgrad':132C,146C 'user':33B,98C,130C","nicknames":[],"mitigations":[],"who_affected":"Deployments of Apache Airflow where some users have Dag edit permission on at least one Dag and read access to others. Users who upgraded to 3.3.2 for CVE-2026-75157 are still affected. unknown whether single-user or fully-trusted deployments are exposed beyond this.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["apacheairflow","medium","python","runtime","selfhosted"],"campaign_type":null,"search_a":"'-111453':18A,21A '-2026':17A,20A 'airflow':2A 'apach':1A 'asset':3A 'cve':16A,19A 'dag':9A,14A 'delet':7A 'edit':10A 'event':6A 'ignor':8A 'permiss':11A 'queu':5A 'queued-ev':4A 'run':15A 'suppress':12A","search_b":"'airflow':24B,32B 'apach':23B 'apache-airflow':22B 'asset':43B,54B 'asset-trigg':53B 'authent':31B 'cannot':60B 'dag':39B,46B,58B 'delet':41B 'edit':35B,61B 'event':44B 'host':29B 'one':38B 'python':25B 'queu':42B 'read':50B 'right':36B 'run':56B 'runtim':26B 'self':28B 'self-host':27B 'suppress':52B 'trigger':55B 'user':33B","search_c":"'-2026':128C '-75157':129C '3.3.2':137C '3.4.0':151C 'access':107C 'affect':143C 'airflow':63C,136C,150C 'apach':62C,135C,149C 'apache-airflow':134C,148C 'api':65C 'asset':70C,113C 'asset-trigg':112C 'authent':97C 'caller':93C 'cannot':119C 'check':74C 'could':94C,110C 'cve':127C 'dag':75C,80C,91C,104C,117C 'delet':68C,85C 'edit':76C,100C,120C 'endpoint':66C 'event':73C,88C 'everi':90C 'fix':125C,140C 'id':81C 'incomplet':124C 'later':153C 'one':103C 'other':109C 'paramet':83C 'permiss':77C,101C 'queri':82C 'queu':72C,87C 'read':95C,106C 'run':115C 'still':142C 'suppress':111C 'trigger':114C 'upgrad':132C,146C 'user':98C,130C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-09T10:17:04+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111453","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111453","severity":null,"published_at":"2026-11-09T10:17:04+00:00","modified_at":"2026-11-09T10:17:04+00:00","first_seen_at":"2026-11-09T10:25:48+00:00","fetched_at":"2026-11-09T10:25:48+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}