A vulnerability labeled as problematic has been found in Apache Airflow up to 3.2.0. This affects an unknown function of the file /ui/dags of the component Request Parameter Handler. The manipulation results in insufficient granularity of access control.
This vulnerability is cataloged as CVE-2026-38743. The attack may be launched remotely. There is no exploit available.
The affected component should be upgraded.
