CVE-2026-75157Patch

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-axis permission with `READ` instead of `EDIT`. Any authenticated user who could read a Dag could therefore delete that Dag's queued asset events, silently suppressing asset-triggered scheduling for it — a state-changing action gated on a read-only permission. Deployments are affected whenever asset-triggered scheduling is in use and Dag read access is granted more widely than Dag edit access, which is the normal RBAC arrangement; no special configuration is required. Upgrade to apache-airflow 3.3.2 or later.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://pranithjain.qzz.io/threatintel/telegram?tab=firehose

Full discourse1 post

PJ@Npj844846d
Patch
🚨 CVE-2026-93019 and CVE-2026-75157 vulnerabilities reported, affecting Imager and Apache Airflow, highlighting the need for prompt patching and updating to prevent exploitation #ThreatIntel #CyberSecurity #InfoSec https://pranithjain.qzz.io/threatintel/telegram?tab=firehose
Post summary
The tweet discloses two CVEs affecting Imager and Apache Airflow with a general recommendation for prompt patching and updating, but lacks specific technical details, named exploits, or active exploitation claims.
0000054
75 followersView on X

Explore more

Back to dashboard