CVE-2026-68872

CVE-2026-68872 affects Apache Airflow’s Amazon provider backends for SSM and Secrets Manager in multi-team deployments. The issue arises when a team-scoped lookup falls back to a team-agnostic path if the team-scoped lookup misses, allowing a caller in one team to resolve a secret belonging to an...