Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-32228

UI / API User with asset materialize permission could trigger dags they had no access to. Users are advised to migrate to Airflow version 3.2.0 that fixes the issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 8.6%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-32228
  • Apache » Airflow » Version: 3.0.0
    cpe:2.3:a:apache:airflow:3.0.0
  • Apache » Airflow » Version: 3.0.1
    cpe:2.3:a:apache:airflow:3.0.1
  • Apache » Airflow » Version: 3.0.2
    cpe:2.3:a:apache:airflow:3.0.2
  • Apache » Airflow » Version: 3.0.3
    cpe:2.3:a:apache:airflow:3.0.3
  • Apache » Airflow » Version: 3.0.4
    cpe:2.3:a:apache:airflow:3.0.4
  • Apache » Airflow » Version: 3.0.5
    cpe:2.3:a:apache:airflow:3.0.5
  • Apache » Airflow » Version: 3.0.6
    cpe:2.3:a:apache:airflow:3.0.6
  • Apache » Airflow » Version: 3.1.0
    cpe:2.3:a:apache:airflow:3.1.0
  • Apache » Airflow » Version: 3.1.1
    cpe:2.3:a:apache:airflow:3.1.1
  • Apache » Airflow » Version: 3.1.2
    cpe:2.3:a:apache:airflow:3.1.2
  • Apache » Airflow » Version: 3.1.3
    cpe:2.3:a:apache:airflow:3.1.3
  • Apache » Airflow » Version: 3.1.4
    cpe:2.3:a:apache:airflow:3.1.4
  • Apache » Airflow » Version: 3.1.5
    cpe:2.3:a:apache:airflow:3.1.5
  • Apache » Airflow » Version: 3.1.6
    cpe:2.3:a:apache:airflow:3.1.6
  • Apache » Airflow » Version: 3.1.7
    cpe:2.3:a:apache:airflow:3.1.7
  • Apache » Airflow » Version: 3.1.8
    cpe:2.3:a:apache:airflow:3.1.8


Products
Pricing
Contact Us

Shodan ® - All rights reserved