CVE-2026-45426: Incorrect Authorization

Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag. Apache Airflow's Log server authorized JWT tokens against Dag IDs by applying Python's str.lstrip to the requested path segment when verifying the JWT's sub...

August 20, 2019 — KB4511521 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1803

None None...