NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-32228
Summary

UI / API User with asset materialize permission could trigger dags they had no access to.
Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.

Publication Date April 18, 2026, 4:16 p.m.
Registration Date April 19, 2026, 4:09 a.m.
Last Update April 18, 2026, 4:16 p.m.
Related information, measures and tools
Common Vulnerabilities List