A vulnerability marked as problematic has been reported in Apache Airflow up to 3.2.0. This impacts an unknown function of the component Asset Dependency Graph. This manipulation causes insufficient granularity of access control.
This vulnerability is registered as CVE-2026-40690. Remote exploitation of the attack is possible. No exploit is available.
It is suggested to upgrade the affected component.
