Apache Airflow’s Log server verifies JWT tokens by stripping the leftmost characters of the requested DAG path using Python’s str.lstrip, which unintentionally allows a token issued for one DAG to authorize access to any other DAG whose name starts with any subset of the characters present in the originally authorized DAG name. This flaw, identified as CWE‑863, enables an authenticated worker—already holding a valid Log‑server JWT for at least one DAG—to read logs from other DAGs that share a similar character‑class prefix, thereby leaking task output and error traces beyond the intended per‑DAG isolation boundary.

The affected product is Apache Airflow supplied by the Apache Software Foundation; all releases older than 3.2.2 are vulnerable, and users should upgrade to version 3.2.2 or later to close the authorization bypass.

Because the attacker must already be authenticated with a Log‑server JWT, the threat is internal and requires possession of a valid token; exploitation requires only a standard HTTP request to the Log server, so the complexity is moderate. The vulnerability is not listed in CISA’s KEV catalog, and its EPSS score of < 1% indicates a very low likelihood of exploitation, but the potential for data exposure across DAG logs warrants immediate remediation, especially in multi‑team or shared‑executor environments.