Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/12 11:17 a.m.•13 views

CVE-2026-68868

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...

6.5CVSS0.00596EPSS
SaveExploits0References3
OSV
OSV
•added 2026/08/12 11:17 a.m.•9 views

PYSEC-2026-3714

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...

6.5CVSS5.4AI score0.00596EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/08/12 10:27 a.m.•17 views

EUVD-2026-57163

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...

6.5CVSS5.4AI score0.00596EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/08/12 10:27 a.m.•18 views

CVE-2026-68868

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's teamname was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnosti...

5.4AI score0.00596EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/12 12:00 a.m.•12 views

PT-2026-71048

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's team name was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnost...

6.5CVSS5.4AI score0.00596EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/10 6:21 p.m.•18 views

CVE-2026-68872 Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable

The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in o...

6.5CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder