The /ui/structure/structure_data endpoint in Airflow returns external dependency graph nodes for linked DAGs without verifying that the user has read permission on those linked DAGs. An authenticated UI or API user who can read one DAG can therefore enumerate the IDs and dependency metadata of other DAGs to which they are not authorized. This flaw enables disclosure of the DAG dependency topology and other workflow information that should remain private. The underlying weakness is improper authorization (CWE-285).

Apache Airflow deployments that rely on per‑DAG read scoping to keep dependency topology private across teams. Versions prior to 3.2.2 are affected; upgrading to 3.2.2 or later resolves the issue.

The vulnerability can be exploited by any authenticated user that possesses read access to at least one DAG; no additional exploits are required. While no EPSS or CVSS score is provided, the ability to enumerate DAG metadata constitutes a high-impact information‑disclosure risk. The flaw is not currently listed in the CISA KEV catalog and no publicly available exploitation code is documented, but the potential for privacy leakage and cross‑team data exposure warrants prompt remediation.