Apache Airflow: DAG authorization bypass

Vulnerability

Description

The /ui/dependencies endpoint in Apache Airflow versions 3.1.0 through 3.1.7 returns the full Directed Acyclic Graph (DAG) dependency graph without filtering by authorized DAG IDs [2]. This constitutes an authorization bypass, as the endpoint fails to enforce access controls that restrict which DAGs a user is permitted to view [3].

Exploitation

An attacker must be authenticated to the Airflow instance and possess at least the "DAG Dependencies" permission [2]. With this minimal privilege, they can query the /ui/dependencies endpoint to enumerate all DAGs present in the system, including those they are not authorized to access [3]. No additional network access or elevated privileges are required beyond standard UI access.

Impact

Successful exploitation allows an attacker to discover the existence and structure of DAGs they should not be able to see. This information disclosure could reveal sensitive workflow logic, data pipeline details, or business processes, potentially aiding further attacks [3]. The issue is rated as low severity by the Apache Airflow project [3].

Mitigation

Users are recommended to upgrade to Apache Airflow 3.1.8 or later, which resolves the issue by adding proper authorization checks to the endpoint [2][4]. The fix was implemented in pull request #62046 [4]. No workaround is documented for affected versions.