CVE-2026-76185

Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped "" delimiters, so different team, secret id pairs could collide. In multi-team deployments a Dag author could read another team's Variable or Connection value by crafting a colliding secret id...