CVE-2023-25956

The CVE-2023-25956 issue is a vulnerability in the Apache Airflow AWS Provider (pre-7.2.1) described as a generation of an error message that contains sensitive information, leading to information disclosure. Multiple connected sources corroborate affected versions (

CVE-2026-42526

The apache-airflow-providers-amazon package (prior to version 9.28.0 ) contains a vulnerability in its AWS Secrets Manager and SSM Parameter Store backends. The team-scoping logic could incorrectly resolve a conn_id containing a forward slash (e.g., "my_team/conn") to a path belonging to a differ...

CVE-2026-25604

The apache-airflow-providers-amazon package (versions 8.0.0 – 9.21.x) is vulnerable to a Host Header Injection in the AWS Auth Manager . The _prepare_flask_request() method fails to validate the client-provided Host header, using it instead to construct the SAML Assertion Consumer Service (ACS) c...

CVE-2026-68872

The apache-airflow-providers-amazon package is vulnerable to an authorization bypass in its SecretsManagerBackend and SystemsManagerParameterStoreBackend lookup paths. In deployments using multi-team mode , a caller from one team can resolve a secret belonging to another team by providing an ID t...