The vulnerability resides in Apache Airflow’s asset materialization endpoint and the XCom result check used by wait_dag_run_until_finished. When a team‑aware authentication manager is in use, the authorization logic does not consult the DAG resource for team scoping, allowing an authenticated user from one team to trigger DAG runs belonging to another team and to read that team’s XCom values. This flaw, identified as CWE‑862: Missing Authorization, constitutes an authorization bypass that permits cross‑team workflow execution and disclosure of potentially confidential execution data.

The affected product is Apache Airflow from the Apache Software Foundation. Any installation that runs in multi‑team mode with a team‑aware authentication manager (such as the Keycloak auth manager) and is older than version 3.3.1 is vulnerable. Deployments that use the FAB authentication manager are not affected by this issue.

The CVSS score is 6.5, indicating a moderate severity. The vulnerability directly bypasses critical access controls, giving a credentialed attacker the ability to execute arbitrary DAG runs and exfiltrate cross‑team XCom data. The EPSS score is not available, and the vulnerability is not recorded in CISA’s KEV catalog, suggesting no widespread exploitation yet. Nevertheless, the exploitability remains high for any affected environment, and the potential impact on confidentiality, integrity, and availability of workflow data is significant.