Apache Airflow versions 3.0.0 up to but not including 3.1.1 contain a vulnerability where users with CREATE privileges but without UPDATE privileges on Pools, Connections, or Variables can update existing records by using the bulk create API with the overwrite action. This issue allows privilege escalation within the application data management. The vulnerability has a medium severity score of 4.6 and was fixed in version 3.1.1.