CVE-2026-48891: A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag

mediumCVSS 4.3CVE-2026-48891

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with read permission on some Dags could enumerate the identifiers of other Dags they were not authorized to read by inspecting the dependency graph for trigger / sensor references. Affects deployments that rely on per-Dag read scoping to keep Dag identifiers private across teams. This is a residual gap in the fix for CVE-2026-28563, which filtered the top-level Dag key but did not propagate the filter into the trigger / sensor dep-source / dep-target fields. Users who already upgraded for CVE-2026-28563 should additionally upgrade to apache-airflow 3.3.0 or later to cover the residual trigger / sensor dependency leak.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: medium — CVSS 4.3
Published: 2026-07-07
Last updated: 2026-07-09
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-48891

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-488910.64% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 46% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-48891	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[NEW] [medium] Apache Airflow: Multiple vulnerabilitiescert-bund

Recent advisories for A bug in

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

unknownCVE-2026-14461: mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function. An attacker …nvd · 2026-07-10
criticalCVE-2026-33264: A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-…nvd · 2026-07-07
criticalGHSA-2pq5-3q89-j7cc: Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cyph…ghsa · 2026-07-06
unknownCVE-2026-50238: Rejected reason: Red Hat Product Security has concluded that this CVE is not required. The rep…nvd · 2026-07-03
mediumCVE-2026-53489: containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 conta…nvd · 2026-07-01
highCVE-2026-6687: FatFs R0.16 and earlier contains a stack overflow bug in f_getlabel() because exFAT label lengt…nvd · 2026-07-01