CVE-2026-97636

The apache-airflow-providers-hashicorp component is vulnerable to a team-scope guard bypass in the HashiCorp Vault secrets backend. In multi-team deployments, a Dag author can provide a user-controlled Variable key containing path separators. If the team-scoped lookup fails, the backend falls bac...

CVE-2026-86465: Authorization Bypass Through User-Controlled Key

Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the backend to resolve a secret belonging to ...