Apache Software Foundation Apache Airflow Amazon provider
CVE-2026-86467High 8.8Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account0.3%
CVE-2026-68872Medium 6.5Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable0.6%
CVE-2026-42526Medium 5.3Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends0.4%