Apache Airflow versions prior to 3.2.1rc1 contain a vulnerability in the asset dependency graph where nodes are not properly restricted by the viewer's DAG read permissions. This allows a user with read access to at least one DAG to browse the asset graph and discover the existence and names of DAGs and assets outside their authorized scope. The issue is fixed in version 3.2.1rc1.