CVE-2026-68870

Apache Airflow's Microsoft Azure provider: microsoft.azure Key Vault backend in multi-team deployments has a guard bypass where a team-scoped id can resolve a secret belonging to another team due to a team-agnostic lookup fall-through when the lookup misses. This enables a caller to obtain the cr...