Apache Software Foundation Apache Airflow Apache Kafka provider

• CVE-2026-86792 High 8.8 Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler via Kafka connection callback configuration 1.2%