CVE-2026-68076

Apache Airflow's environment-variable secrets backend contained a team-scope guard bypass in the connections-test API. The guard that prevented cross-team resolution only activated when no team scope was supplied, and its pattern failed to match team names containing underscores. When the guard d...