Apache Airflow 3.2.0 contains an authorization bypass vulnerability (CWE-639) in its bulk Task Instances API endpoints (PATCH/DELETE /api/v2/dags/{dag_id}/dagRuns/{dag_run_id}/taskInstances). The API evaluates authorization against the dag_id from the URL path but operates on dag_id and dag_run_id values extracted from the request body. This mismatch allows an authenticated user with edit permission on one DAG to alter task instance states in other DAGs by specifying those DAGs in the request body while keeping the authorized DAG's ID in the URL path. This flaw undermines per-DAG edit-scope isolation controls. The vendor recommends upgrading to Apache Airflow 3.2.2 or later to fix this issue.

An authenticated user with edit permissions on a single DAG can bypass intended authorization boundaries and modify task instance states in other DAGs. This could lead to unauthorized changes in workflow execution states across DAGs, potentially disrupting operations or causing data integrity issues in multi-tenant or team-isolated environments. There is no indication of known exploits in the wild at this time.

Users should upgrade to Apache Airflow version 3.2.2 or later, where this authorization bypass vulnerability has been addressed. No other mitigation or temporary workaround is specified. Patch status is not explicitly confirmed in the vendor advisory, but the recommendation to upgrade indicates an official fix is available in 3.2.2.