CVE-2026-32794

The Apache Airflow Provider for Databricks contains an Improper Certificate Validation vulnerability (CWE-295) affecting versions 1.10.0 before 1.12.0 . The provider fails to validate TLS certificates when communicating with the Kubernetes API server during federated token exchange because both s...