CVE-2026-82355

When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` token, Airflow resolves the caller from the cookie and ignores the bearer token, inverting the intended precedence of bearer over cookie. The request then executes -- and is recorded in the audit log -- as the cookie's principal rather than the identity the client explicitly presented. Only Apache Airflow 3.3.0 and 3.3.1 are affected. Earlier releases do not contain the code path that caches the cookie-derived user, and are not vulnerable. Exploiting this requires an attacker to first place a valid session cookie of their own into the victim's browser or client: for example by cookie tossing from a sibling subdomain, through cross-site scripting in a separate application sharing a parent domain, or via a shared workstation. Deployments that host the Airflow UI on a domain shared with other applications are therefore the most exposed; a deployment on a dedicated domain with no co-hosted applications is not reachable this way. The consequence is principal confusion and misattributed audit records rather than a direct privilege escalation. Users of 3.3.0 or 3.3.1 should upgrade to Apache Airflow 3.3.2 or later, which resolves the caller from the explicitly supplied credential whenever one is present.

• CWE-384

• https://github.com/apache/airflow/pull/72225Issue Tracking, Patch
• https://github.com/apache/airflow/pull/72723Issue Tracking, Patch
• https://lists.apache.org/thread/3p7zpdvv40tn01m0xk5mt2rxg88mw8w1Mailing List, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2026/09/21/4Mailing List, Third Party Advisory

Published

Sep 21, 2026

Last Modified

Sep 25, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82333multer is a middleware for handling multipart/form-data in N…7.5
• CVE-2026-8234A security vulnerability has been detected in EFM ipTIME A80…8.8
• CVE-2026-82340IBM Guardium Data Protection 12.2 is vulnerable to unauthent…9.8
• CVE-2026-82343A flaw was found in the file-psd plugin in GIMP. When proces…6.1
• CVE-2026-82346A potential security vulnerability has been identified in th…7
• CVE-2026-8235A vulnerability was detected in 8421bit MiniClaw 0.8.0/0.9.0…5.5
• CVE-2026-82356Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA k…7.5
• CVE-2026-8236Concrete CMS 9.5.0 and below is vulnerable to IDOR combined …4.3
• CVE-2026-82364A security vulnerability has been detected in macrozheng mal…4.2
• CVE-2026-82367Exposure of Data Element to Wrong Session vulnerability in a…2.3
• CVE-2026-82368Insecure access controls on internal service ports in Brocad…8.7
• CVE-2026-82369Insufficient input sanitization of shell metacharacters in t…8.6