CVE-2026-68868

CVE-2026-68868 affects Apache Airflow’s Google provider Secret Manager backend. In multi-team deployments, the team_name was accepted but dropped at an internal boundary, causing every lookup to resolve against a team-agnostic secret name. Consequently, a task or DAG belonging to one team could r...