CVE-2025-57735

The Apache Airflow auth manager contains a vulnerability where JWT tokens issued for user authentication remain valid after a user logs out. This occurs because the logout flow for FabAuthManager and KeycloakAuthManager fails to reach the underlying revoke_token() call, allowing an attacker with ...