What’s Vulnerable › Products

Apache Software Foundation Apache Airflow Amazon provider vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Apache Software Foundation Apache Airflow Amazon provider version is affected

Latest Apache Software Foundation Apache Airflow Amazon provider vulnerabilities

• CVE-2026-86467 — Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account (CVSS 8.8)
• CVE-2026-68872 — Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable (CVSS 6.5)
• CVE-2026-42526 — Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends (CVSS 5.3)
• CVE-2026-25604 — Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass (CVSS 5.4)
• CVE-2023-25956 — Apache Airflow AWS Provider: Arbitrary file read via AWS provider (CVSS 7.5)