CVE-2026-49296 Apache Software Foundation CVE debrief

Who should care

Defenders responsible for Apache Airflow deployments that co-locate multiple DAGs in a single file and rely on per-DAG access control should assess exposure and prioritize upgrading to apache-airflow 3.3.0 or later.

Why it matters

CVE-2026-49296 allows unauthorized disclosure of DAG sources in Apache Airflow deployments with co-located DAGs, potentially leading to sensitive data exposure. Defenders should verify exposure, prioritize remediation, and apply compensating controls as needed.

• Source disclosure may allow unauthorized access to sensitive data or configuration.
• Compensating controls may be needed to limit exposure until remediation can be applied.
• Verification of exposure and remediation priority are necessary to prevent potential data leaks.

Technical summary

CVE-2026-49296 is a vulnerability in apache-airflow that allows users authorized to read one DAG to disclose the source of other DAGs co-located in the same source file. This occurs because the `GET /api/v2/dagSources/{dag_id}` endpoint and the equivalent DAG-source view in the UI return the entire source file without redacting DAGs the caller was not authorized to read. The vulnerability affects deployments that co-locate multiple DAGs in a single file and rely on per-DAG access control to limit source visibility. Single-DAG-per-file deployments are not affected. The vulnerability has a CVSS score of 6.5 and a severity of MEDIUM. To exploit this vulnerability, an attacker must have authorization to read at

Defensive priority

Defenders should prioritize verifying exposure and upgrading to apache-airflow 3.3.0 or later.

Recommended defensive actions

• Verify if your Apache Airflow deployment co-locates multiple DAGs in a single file and relies on per-DAG access control.
• Check if your Apache Airflow version is 3.3.0 or later.
• Upgrade to apache-airflow 3.3.0 or later if vulnerable.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, which allows users authorized to read one DAG to disclose the source of other DAGs co-located in the same source file in apache-airflow versions before 3.3.0.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.