CVE-2026-68872

mediumPriorität · verfolgen · 0EPSS 0.006 · 48. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.60% (48th) EPSS

CVSS 6.5 · medium

Is it mine?

9 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · bewertet 2026-10-27

The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in one team could resolve a secret belonging to another team by supplying an id that spells out that team's namespace, obtaining its credentials in full. No unusual configuration is required beyond enabling multi-team mode and using one of these backends. Users are advised to upgrade to apache-airflow-providers-amazon 9.34.0 or later, which refuses the team-agnostic fall-through for an id that could name a team namespace.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NsecondaryAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · OSV

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-639US

betroffene Produkte (9)

Betroffene Produkte und Versionsbereiche.

Apache Airflow Amazon provider <9.34.0alle Versionencert_bundDE
Apache Airflow Microsoft Azure provider <14.1.0alle Versionencert_bundDE
Apache Airflow Yandex provider <4.5.1alle Versionencert_bundDE
Apache Airflow≤ Microsoft Azure provider <14.1.0cert_bundDE
Apache Airflow≤ Amazon provider <9.34.0cert_bundDE
Apache Airflow≤ Yandex provider <4.5.1cert_bundDE
Apache Software Foundation Apache Airflow Amazon provider0 → 9.34.0enisa_euvdEU
apache apache-airflow-providers-amazon< 9.34.0nvdUScpe:2.3:a:apache:apache-airflow-providers-amazon:*:*:*:*:*:*:*:*
PyPI apache-airflow-providers-amazon< 9.34.0osvUSpkg:pypi/apache-airflow-providers-amazon

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2026-2733Apache Airflow Provider: Mehrere Schwachstellen ermöglichen Offenlegung von InformationenDeutsch2026-08-10csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Apache Airflow ausnutzen, um Informationen offenzulegen.
PYSEC-2026-37132026-08-10vendor · osvUS
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in one team could resolve a secret belonging to another team by supplying an id that spells out that team's namespace, obtaining its credentials in full. No unusual configuration is required beyond enabling multi-team mode and using one of these backends. Users are advised to upgrade to apache-airflow-providers-amazon 9.34.0 or later, which refuses the team-agnostic fall-through for an id that could name a team namespace.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cert_bund nvd osv NVD CVE.org MITRE

veröffentlicht 2026-08-10geändert 2026-10-24

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

http://www.openwall.com/lists/oss-security/2026/08/10/6 cnnvd
https://github.com/apache/airflow/pull/70878 cnnvd
https://lists.apache.org/thread/9nd31g40rd2zpgwwymskvjpfq1xnmllg cnnvd
https://github.com/apache/airflow/pull/70878 enisa_euvd
https://lists.apache.org/thread/9nd31g40rd2zpgwwymskvjpfq1xnmllg enisa_euvd
http://www.openwall.com/lists/oss-security/2026/08/10/6Mailing ListThird Party Advisorynvd
https://github.com/apache/airflow/pull/70878Issue TrackingPatchnvd
https://lists.apache.org/thread/9nd31g40rd2zpgwwymskvjpfq1xnmllgMailing ListVendor Advisorynvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan