Lucene search
+L

5 matches found

OSV
OSV
added 2026/06/05 5:40 a.m.11 views

BIT-AIRFLOW-2026-48726 Apache Airflow: revoke_token() unreachable in FabAuthManager / KeycloakAuthManager logout path

A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for FabAuthManager and KeycloakAuthManager did not actually reach the underlying revoketoken call, so the JWT remained accepted by the API server...

9.1CVSS5.6AI score0.00667EPSS
SaveExploits0References4
Rows per page
Query Builder