Authorization Flaw in Apache Airflow Affects User Task Log Access

CVE-2026-22922

What is CVE-2026-22922?

Apache Airflow versions 3.1.0 through 3.1.6 experience an authorization flaw that permits authenticated users with limited task access permissions to view task logs without proper privileges. This vulnerability exposes sensitive log information, creating potential security risks. It is advised for users to upgrade to Apache Airflow version 3.1.7 or later to mitigate this issue. For more information, please refer to the provided vendor advisory and patch notes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References