What is the CVSS score of EUVD-2026-33596?

EUVD-2026-33596 has a CVSS 3.1 base score of 3.1 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.0%.

Is there a patch available for EUVD-2026-33596?

Yes, a patch is available for EUVD-2026-33596. Update the affected software to the latest version immediately.

Apache Airflow EUVD-2026-33596

| CVE-2026-40963 LOW

Improper Authorization (CWE-285)

2026-05-31

GHSA-gprj-xvq8-w53q

Open Redirect Apache Authentication Bypass

3.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.1 LOW

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Source Code Evidence Fetched

Jun 01, 2026 - 15:23 vuln.today

Analysis Generated

Jun 01, 2026 - 15:23 vuln.today

CVSS changed

Jun 01, 2026 - 15:22 NVD

3.1 (LOW)

Patch available

Jun 01, 2026 - 10:01 EUVD

CVE Published

May 31, 2026 - 12:45 nvd

UNKNOWN (no severity yet)

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

4 pypi packages depend on apache-airflow (2 direct, 2 indirect)

Ecosystem-wide dependent count for version 3.0.0.

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

DAG authorization bypass in Apache Airflow 3.0.0-3.2.1 allows authenticated low-privileged users to enumerate DAG structure and cross-DAG dependency topology for DAGs they are not authorized to view, by querying the /ui/structure/structure_data endpoint without proper RBAC enforcement. The endpoint returned external dependency nodes and edges without applying the ReadableDagsFilterDep authorization filter, crossing per-DAG RBAC boundaries. No public exploit exists and EPSS is 0.01% (4th percentile); impact is confined to confidentiality of workflow topology in multi-tenant or fine-grained RBAC deployments.

Technical ContextAI

Apache Airflow's FastAPI-based UI backend exposes /ui/structure/structure_data (implemented in airflow-core/src/airflow/api_fastapi/core_api/routes/ui/structure.py) to render DAG dependency graphs, including cross-DAG relationships via external triggers when external_dependencies=True is passed. The RBAC framework uses requires_access_dag and ReadableDagsFilterDep to restrict which DAGs an authenticated caller may access. CWE-285 (Improper Authorization) identifies the root cause: the handler accepted and returned external dependency data - both DAG dependency nodes and dependency edge targets - without checking whether those referenced DAG IDs appeared in the caller's authorized readable set. The GitHub PR #65342 fix injects ReadableDagsFilterDep, materializes readable_dag_ids, and skips any dependency or edge whose target DAG ID falls outside the authorized set before constructing the response payload.

RemediationAI

Upgrade to Apache Airflow 3.2.2 or later, which incorporates the fix from GitHub pull request #65342 adding ReadableDagsFilterDep enforcement to the structure_data endpoint. The vendor advisory thread is available at https://lists.apache.org/thread/s907bhsksc37m59f0loqjcp1ryobrr60. If an immediate upgrade is not possible, restrict network-level access to the Airflow webserver UI to only explicitly trusted, internally managed user accounts - this does not eliminate the vulnerability but reduces the attacker pool to already-authenticated insiders, consistent with the low EPSS. Additionally, audit current DAG-level RBAC assignments: if no users are subject to per-DAG read restrictions (i.e., all authenticated users have global DAG access), the practical impact of this vulnerability is negligible and the deployment is not meaningfully exposed until the patch can be applied.