---
id: "CVE-2026-111454"
page: "https://infrastack.ai/live/CVE-2026-111454"
kind: "vulnerability"
aliases: ["CVE-2026-111454"]
title: "Apache Airflow: asset API leaks IDs of Dags a user cannot read"
severity: "low"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["apache-airflow", "python", "runtime", "self-hosted"]
not_affected_if: ["all-users-trusted", "single-tenant-deployment"]
published_at: "2026-11-09T10:17:04+00:00"
first_seen_at: "2026-11-09T10:25:48+00:00"
updated_at: "2026-11-09T10:26:49+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111454", "first_seen_at": "2026-11-09T10:25:48+00:00"}]
exploit_sources: []
---

# Apache Airflow: asset API leaks IDs of Dags a user cannot read

Link for people: https://infrastack.ai/live/CVE-2026-111454 (this .md is for agents)

Apache Airflow's asset API endpoints return the IDs of Dags that schedule on, produce, or consume an asset without checking the caller's read permission on those Dags. An authenticated user with asset read access can learn Dag IDs they are not authorized to see.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version with `airflow version` or `pip show apache-airflow`
- Confirm whether any users hold asset read access without Dag read access in your role configuration

## Fix

- `apache-airflow` `3.4.0` or later

## Timeline

- 2026-11-09T10:25:48+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111454

## From the sources

Apache Airflow's asset API endpoints returned the IDs of Dags that are scheduled on, produce, or consume an asset without checking whether the caller may read those Dags. An authenticated user with asset read access could learn the IDs of Dags they are not authorized to see. Users are advised to upgrade to apache-airflow 3.4.0 or later.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_