Vulnerability-Lookup

CVE-2026-68076 (GCVE-0-2026-68076)

Vulnerability from cvelistv5 – Published: 2026-08-12 15:23 – Updated: 2026-09-16 15:05

Title

Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection

Summary

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__<TEAM>___<ID>` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team's Connection and authenticate outward with that team's credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-12 18:58 UTC

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

apache CNA under the mitre root

CNA scorecard B 76/100 over 1078 records in the last 180 days details

References

5 references

URL	Tags
https://github.com/apache/airflow/pull/70736	patch
https://github.com/apache/airflow/pull/70886	patch
https://github.com/apache/airflow/pull/70902	patch
https://lists.apache.org/thread/v4mc51dgmrc1t82mh…	vendor-advisory
http://www.openwall.com/lists/oss-security/2026/0…

Impacted products

1 product

Vendor	Product	Version	CPE status
Apache Software Foundation	Apache Airflow	Affected: 0 , < 3.3.1 (semver)	guessed

Credits

Andrew Rukin (Arenadata) Jarek Potiuk

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-08-12T17:20:20.969Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/08/12/11"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-68076",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-12T18:58:28.378048Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-12T18:58:49.390Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pypi.python.org",
          "defaultStatus": "unaffected",
          "packageName": "apache-airflow",
          "packageURL": "pkg:pypi/apache-airflow",
          "product": "Apache Airflow",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "3.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Andrew Rukin (Arenadata)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Jarek Potiuk"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Apache Airflow\u0026#x27;s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0026#x27;s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u0026lt;TEAM\u0026gt;___\u0026lt;ID\u0026gt;` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0026#x27;s Connection and authenticate outward with that team\u0026#x27;s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later."
            }
          ],
          "value": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u003cTEAM\u003e___\u003cID\u003e` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0027s Connection and authenticate outward with that team\u0027s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T15:05:59.169Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/apache/airflow/pull/70736"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/apache/airflow/pull/70886"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/apache/airflow/pull/70902"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Apache Airflow: Connections test API: team-scope guard bypass resolves another team\u0027s environment Connection",
      "x_generator": {
        "engine": "airflow-s/generate_cve_json.py"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2026-68076",
    "datePublished": "2026-08-12T15:23:22.930Z",
    "dateReserved": "2026-07-30T09:10:44.222Z",
    "dateUpdated": "2026-09-16T15:05:59.169Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68076",
      "date": "2026-10-27",
      "epss": "0.00342",
      "percentile": "0.27597"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "collectionURL": "https://pypi.python.org",
                "defaultStatus": "unaffected",
                "packageName": "apache-airflow",
                "packageURL": "pkg:pypi/apache-airflow",
                "product": "Apache Airflow",
                "vendor": "Apache Software Foundation",
                "versions": [
                  {
                    "lessThan": "3.3.1",
                    "status": "affected",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "security@apache.org"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FDF5E090-3549-452E-BB3A-741DCE15078E",
                    "versionEndExcluding": "3.3.1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u003cTEAM\u003e___\u003cID\u003e` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0027s Connection and authenticate outward with that team\u0027s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later."
          },
          {
            "lang": "es",
            "value": "El backend de secretos de variables de entorno de Apache Airflow resolvi\u00f3 una Conexi\u00f3n o Variable con \u00e1mbito de equipo del \u00e1mbito de equipo incorrecto. La protecci\u00f3n destinada a evitar esto solo se ejecutaba cuyo no se proporcionaba ning\u00fan \u00e1mbito de equipo, y su patr\u00f3n no pod\u00eda coincidir con un nombre de equipo que contuviera un guion bajo, que los nombres de equipo pueden contener. Cuyo la protecci\u00f3n no se aplicaba, la b\u00fasqueda recurr\u00eda a una lectura global incondicional que resolv\u00eda la variable almacenada \u2019AIRFLOW_CONN__[TEAM]___[ID]\u2019 independientemente de qu\u00e9 equipo la solicitara. En modo multi-equipo, un usuario autenticado de un equipo podr\u00eda, por lo tanto, hacer que \u2019POST /api/v2/connections/test\u2019 resolviera la Conexi\u00f3n de otro equipo y autenticarse externamente con las credenciales de ese equipo; el endpoint utiliza las credenciales en lugar de devolverlas. La explotaci\u00f3n requiere \u2019[core] multi_team\u2019 habilitado, \u2019[core] test_connection\u2019 configurado como \u2019Enabled\u2019 (se distribuye \u2019Disabled\u2019), secretos con \u00e1mbito de equipo aprovisionados como variables de entorno en el proceso del servidor-API, y conocimiento del identificador codificado. Redirigir la prueba a un host controlado por el atacante est\u00e1 bloqueado por separado. Se aconseja a los usuarios actualizar a apache-airflow 3.3.1 o posterior."
          }
        ],
        "id": "CVE-2026-68076",
        "lastModified": "2026-10-24T16:10:00.153",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "LOW",
                "baseScore": 5.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 2.5,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-68076",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-12T18:58:28.378048Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-08-12T16:17:15.223",
        "references": [
          {
            "source": "security@apache.org",
            "tags": [
              "Issue Tracking",
              "Patch"
            ],
            "url": "https://github.com/apache/airflow/pull/70736"
          },
          {
            "source": "security@apache.org",
            "url": "https://github.com/apache/airflow/pull/70886"
          },
          {
            "source": "security@apache.org",
            "tags": [
              "Issue Tracking",
              "Patch"
            ],
            "url": "https://github.com/apache/airflow/pull/70902"
          },
          {
            "source": "security@apache.org",
            "tags": [
              "Mailing List",
              "Vendor Advisory"
            ],
            "url": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Mailing List",
              "Third Party Advisory"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2026/08/12/11"
          }
        ],
        "sourceIdentifier": "security@apache.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-639"
              }
            ],
            "source": "security@apache.org",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2026-08-12T17:20:20.969Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "url": "http://www.openwall.com/lists/oss-security/2026/08/12/11"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "LOW",
                  "baseScore": 5.4,
                  "baseSeverity": "MEDIUM",
                  "confidentialityImpact": "LOW",
                  "integrityImpact": "NONE",
                  "privilegesRequired": "LOW",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-68076",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-12T18:58:28.378048Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-12T18:58:44.039Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://pypi.python.org",
              "defaultStatus": "unaffected",
              "packageName": "apache-airflow",
              "packageURL": "pkg:pypi/apache-airflow",
              "product": "Apache Airflow",
              "vendor": "Apache Software Foundation",
              "versions": [
                {
                  "lessThan": "3.3.1",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Andrew Rukin (Arenadata)"
            },
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Jarek Potiuk"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "Apache Airflow\u0026#x27;s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0026#x27;s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u0026lt;TEAM\u0026gt;___\u0026lt;ID\u0026gt;` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0026#x27;s Connection and authenticate outward with that team\u0026#x27;s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later."
                }
              ],
              "value": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u003cTEAM\u003e___\u003cID\u003e` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0027s Connection and authenticate outward with that team\u0027s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later."
            }
          ],
          "metrics": [
            {
              "other": {
                "content": {
                  "text": "moderate"
                },
                "type": "Textual description of severity"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-639",
                  "description": "CWE-639: Authorization Bypass Through User-Controlled Key",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-16T15:05:59.169Z",
            "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
            "shortName": "apache"
          },
          "references": [
            {
              "tags": [
                "patch"
              ],
              "url": "https://github.com/apache/airflow/pull/70736"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://github.com/apache/airflow/pull/70886"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://github.com/apache/airflow/pull/70902"
            },
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Apache Airflow: Connections test API: team-scope guard bypass resolves another team\u0027s environment Connection",
          "x_generator": {
            "engine": "airflow-s/generate_cve_json.py"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "assignerShortName": "apache",
        "cveId": "CVE-2026-68076",
        "datePublished": "2026-08-12T15:23:22.930Z",
        "dateReserved": "2026-07-30T09:10:44.222Z",
        "dateUpdated": "2026-09-16T15:05:59.169Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

bit-airflow-2026-68076

Vulnerability from bitnami_vulndb

Published

2026-08-17 05:39

Modified

2026-09-17 12:08

Summary

Apache Airflow: Connections test API: team-scope guard bypass resolves another team's environment Connection

Details

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored AIRFLOW_CONN__<TEAM>___<ID> variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have POST /api/v2/connections/test resolve another team's Connection and authenticate outward with that team's credentials; the endpoint uses the credentials rather than returning them. Exploitation requires [core] multi_team enabled, [core] test_connection set to Enabled (it ships Disabled), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later.

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Bitnami",
        "name": "airflow",
        "purl": "pkg:bitnami/airflow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.3.1"
            }
          ],
          "type": "SEMVER"
        }
      ],
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
          "type": "CVSS_V3"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-68076"
  ],
  "database_specific": {
    "cpes": [
      "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*"
    ],
    "severity": "Medium"
  },
  "details": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u003cTEAM\u003e___\u003cID\u003e` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0027s Connection and authenticate outward with that team\u0027s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later.",
  "id": "BIT-airflow-2026-68076",
  "modified": "2026-09-17T12:08:03.261Z",
  "published": "2026-08-17T05:39:28.051Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://www.openwall.com/lists/oss-security/2026/08/12/11"
    },
    {
      "type": "FIX",
      "url": "https://github.com/apache/airflow/pull/70736"
    },
    {
      "type": "FIX",
      "url": "https://github.com/apache/airflow/pull/70902"
    },
    {
      "type": "ADVISORY",
      "url": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68076"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/pull/70886"
    }
  ],
  "schema_version": "1.6.2",
  "summary": "Apache Airflow: Connections test API: team-scope guard bypass resolves another team\u0027s environment Connection"
}

CLEANSTART-2026-ZG38480 (CVE-2026-68076)

Vulnerability from cleanstart – Published: 2026-10-10 00:41 – Updated: 2026-10-09 07:45 – Source website

Summary

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope

Details

Security vulnerability affects the airflow-3 package. Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope.

Severity

5.4 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

References

URL

Type

	https://github.com/cleanstart-dev/cleanstart-secu…	ADVISORY
	https://osv.dev/vulnerability/CVE-2026-68076	WEB
	https://nvd.nist.gov/vuln/detail/CVE-2026-68076	WEB

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "airflow-3",
        "purl": "pkg:apk/cleanstart/airflow-3"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.2.2-r8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Security vulnerability affects the airflow-3 package. Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope.",
  "id": "CLEANSTART-2026-ZG38480",
  "modified": "2026-10-09T07:45:14Z",
  "published": "2026-10-10T00:41:46.839723Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ZG38480.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-68076"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68076"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope",
  "upstream": [
    "CVE-2026-68076"
  ]
}

FKIE_CVE-2026-68076

Vulnerability from fkie_nvd - Published: 2026-08-12 16:17 - Updated: 2026-10-24 16:10

Severity

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Summary

References

URL	Tags
security@apache.org	https://github.com/apache/airflow/pull/70736	Issue Tracking, Patch
security@apache.org	https://github.com/apache/airflow/pull/70886
security@apache.org	https://github.com/apache/airflow/pull/70902	Issue Tracking, Patch
security@apache.org	https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l	Mailing List, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2026/08/12/11	Mailing List, Third Party Advisory

Impacted products

	Vendor	Product	Version
	apache	airflow	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "collectionURL": "https://pypi.python.org",
          "defaultStatus": "unaffected",
          "packageName": "apache-airflow",
          "packageURL": "pkg:pypi/apache-airflow",
          "product": "Apache Airflow",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "3.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@apache.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDF5E090-3549-452E-BB3A-741DCE15078E",
              "versionEndExcluding": "3.3.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u003cTEAM\u003e___\u003cID\u003e` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0027s Connection and authenticate outward with that team\u0027s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later."
    },
    {
      "lang": "es",
      "value": "El backend de secretos de variables de entorno de Apache Airflow resolvi\u00f3 una Conexi\u00f3n o Variable con \u00e1mbito de equipo del \u00e1mbito de equipo incorrecto. La protecci\u00f3n destinada a evitar esto solo se ejecutaba cuyo no se proporcionaba ning\u00fan \u00e1mbito de equipo, y su patr\u00f3n no pod\u00eda coincidir con un nombre de equipo que contuviera un guion bajo, que los nombres de equipo pueden contener. Cuyo la protecci\u00f3n no se aplicaba, la b\u00fasqueda recurr\u00eda a una lectura global incondicional que resolv\u00eda la variable almacenada \u2019AIRFLOW_CONN__[TEAM]___[ID]\u2019 independientemente de qu\u00e9 equipo la solicitara. En modo multi-equipo, un usuario autenticado de un equipo podr\u00eda, por lo tanto, hacer que \u2019POST /api/v2/connections/test\u2019 resolviera la Conexi\u00f3n de otro equipo y autenticarse externamente con las credenciales de ese equipo; el endpoint utiliza las credenciales en lugar de devolverlas. La explotaci\u00f3n requiere \u2019[core] multi_team\u2019 habilitado, \u2019[core] test_connection\u2019 configurado como \u2019Enabled\u2019 (se distribuye \u2019Disabled\u2019), secretos con \u00e1mbito de equipo aprovisionados como variables de entorno en el proceso del servidor-API, y conocimiento del identificador codificado. Redirigir la prueba a un host controlado por el atacante est\u00e1 bloqueado por separado. Se aconseja a los usuarios actualizar a apache-airflow 3.3.1 o posterior."
    }
  ],
  "id": "CVE-2026-68076",
  "lastModified": "2026-10-24T16:10:00.153",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "LOW",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.5,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-68076",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-08-12T18:58:28.378048Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-08-12T16:17:15.223",
  "references": [
    {
      "source": "security@apache.org",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/apache/airflow/pull/70736"
    },
    {
      "source": "security@apache.org",
      "url": "https://github.com/apache/airflow/pull/70886"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/apache/airflow/pull/70902"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2026/08/12/11"
    }
  ],
  "sourceIdentifier": "security@apache.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-639"
        }
      ],
      "source": "security@apache.org",
      "type": "Secondary"
    }
  ]
}

GHSA-75MG-C62R-V95G

Vulnerability from github – Published: 2026-08-12 18:31 – Updated: 2026-10-02 23:15

Summary

Apache Airflow environment-variable secrets backend permits cross-team credential use

Details

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored AIRFLOW_CONN__<TEAM>___<ID> variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have POST /api/v2/connections/test resolve another team's Connection and authenticate outward with that team's credentials; the endpoint uses the credentials rather than returning them. Exploitation requires [core] multi_team enabled, [core] test_connection set to Enabled (it ships Disabled), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later.

Severity

5.4 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "apache-airflow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.3.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2026-68076"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-639"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2026-10-02T23:15:11Z",
    "nvd_published_at": "2026-08-12T16:17:15Z",
    "severity": "MODERATE"
  },
  "details": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u003cTEAM\u003e___\u003cID\u003e` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0027s Connection and authenticate outward with that team\u0027s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later.",
  "id": "GHSA-75mg-c62r-v95g",
  "modified": "2026-10-02T23:15:11Z",
  "published": "2026-08-12T18:31:18Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-68076"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/pull/70736"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/pull/70886"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/pull/70902"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/commit/e0cac1f6b2ddd473c9e6440ee0acc32b7b6581fc"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/commit/ed87a1a024a55aaa494e6a718cb876f0cbe47b44"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/apache/airflow"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/releases/tag/3.3.1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2026-3709.yaml"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2026/08/12/11"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Apache Airflow environment-variable secrets backend permits cross-team credential use"
}

PYSEC-2026-3709

Vulnerability from pysec - Published: 2026-08-12 16:17 - Updated: 2026-08-19 13:09

Details

Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored AIRFLOW_CONN__<TEAM>___<ID> variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have POST /api/v2/connections/test resolve another team's Connection and authenticate outward with that team's credentials; the endpoint uses the credentials rather than returning them. Exploitation requires [core] multi_team enabled, [core] test_connection set to Enabled (it ships Disabled), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later.

Severity

5.4 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Impacted products

Name	purl
apache-airflow	pkg:pypi/apache-airflow

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {},
      "package": {
        "ecosystem": "PyPI",
        "name": "apache-airflow",
        "purl": "pkg:pypi/apache-airflow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.3.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.0",
        "1.10.1",
        "1.10.10",
        "1.10.10rc1",
        "1.10.10rc2",
        "1.10.10rc3",
        "1.10.10rc4",
        "1.10.10rc5",
        "1.10.11",
        "1.10.11rc1",
        "1.10.11rc2",
        "1.10.12",
        "1.10.12rc1",
        "1.10.12rc2",
        "1.10.12rc3",
        "1.10.12rc4",
        "1.10.13",
        "1.10.13rc1",
        "1.10.14",
        "1.10.14rc1",
        "1.10.14rc2",
        "1.10.14rc3",
        "1.10.14rc4",
        "1.10.15",
        "1.10.15rc1",
        "1.10.1b1",
        "1.10.1rc2",
        "1.10.2",
        "1.10.2b2",
        "1.10.2rc1",
        "1.10.2rc2",
        "1.10.2rc3",
        "1.10.3",
        "1.10.3b1",
        "1.10.3b2",
        "1.10.3rc1",
        "1.10.3rc2",
        "1.10.4",
        "1.10.4b2",
        "1.10.4rc1",
        "1.10.4rc2",
        "1.10.4rc3",
        "1.10.4rc4",
        "1.10.4rc5",
        "1.10.5",
        "1.10.5rc1",
        "1.10.6",
        "1.10.6rc1",
        "1.10.6rc2",
        "1.10.7",
        "1.10.7rc1",
        "1.10.7rc2",
        "1.10.7rc3",
        "1.10.8",
        "1.10.8rc1",
        "1.10.9",
        "1.10.9rc1",
        "1.8.1",
        "1.8.2",
        "1.8.2rc1",
        "1.9.0",
        "2.0.0",
        "2.0.0b1",
        "2.0.0b2",
        "2.0.0b3",
        "2.0.0rc1",
        "2.0.0rc2",
        "2.0.0rc3",
        "2.0.1",
        "2.0.1rc1",
        "2.0.1rc2",
        "2.0.2",
        "2.0.2rc1",
        "2.1.0",
        "2.1.0rc1",
        "2.1.0rc2",
        "2.1.1",
        "2.1.1rc1",
        "2.1.2",
        "2.1.2rc1",
        "2.1.3",
        "2.1.3rc1",
        "2.1.4",
        "2.1.4rc1",
        "2.1.4rc2",
        "2.10.0",
        "2.10.0b1",
        "2.10.0b2",
        "2.10.0rc1",
        "2.10.1",
        "2.10.1rc1",
        "2.10.2",
        "2.10.2rc1",
        "2.10.3",
        "2.10.3rc1",
        "2.10.3rc2",
        "2.10.4",
        "2.10.4rc1",
        "2.10.5",
        "2.10.5rc1",
        "2.11.0",
        "2.11.0rc1",
        "2.11.1",
        "2.11.1rc1",
        "2.11.1rc2",
        "2.11.2",
        "2.11.2rc1",
        "2.2.0",
        "2.2.0b1",
        "2.2.0b2",
        "2.2.0rc1",
        "2.2.1",
        "2.2.1rc1",
        "2.2.1rc2",
        "2.2.2",
        "2.2.2rc1",
        "2.2.2rc2",
        "2.2.3",
        "2.2.3rc1",
        "2.2.3rc2",
        "2.2.4",
        "2.2.4rc1",
        "2.2.5",
        "2.2.5rc1",
        "2.2.5rc2",
        "2.2.5rc3",
        "2.3.0",
        "2.3.0b1",
        "2.3.0rc1",
        "2.3.0rc2",
        "2.3.1",
        "2.3.1rc1",
        "2.3.2",
        "2.3.2rc1",
        "2.3.2rc2",
        "2.3.3",
        "2.3.3rc1",
        "2.3.3rc2",
        "2.3.3rc3",
        "2.3.4",
        "2.3.4rc1",
        "2.4.0",
        "2.4.0b1",
        "2.4.0rc1",
        "2.4.1",
        "2.4.1rc1",
        "2.4.2",
        "2.4.2rc1",
        "2.4.3",
        "2.4.3rc1",
        "2.5.0",
        "2.5.0rc1",
        "2.5.0rc2",
        "2.5.0rc3",
        "2.5.1",
        "2.5.1rc1",
        "2.5.1rc2",
        "2.5.2",
        "2.5.2rc1",
        "2.5.2rc2",
        "2.5.3",
        "2.5.3rc1",
        "2.5.3rc2",
        "2.6.0",
        "2.6.0b1",
        "2.6.0rc1",
        "2.6.0rc2",
        "2.6.0rc3",
        "2.6.0rc4",
        "2.6.0rc5",
        "2.6.1",
        "2.6.1rc1",
        "2.6.1rc2",
        "2.6.1rc3",
        "2.6.2",
        "2.6.2rc1",
        "2.6.2rc2",
        "2.6.3",
        "2.6.3rc1",
        "2.7.0",
        "2.7.0b1",
        "2.7.0rc1",
        "2.7.0rc2",
        "2.7.1",
        "2.7.1rc1",
        "2.7.1rc2",
        "2.7.2",
        "2.7.2rc1",
        "2.7.3",
        "2.7.3rc1",
        "2.8.0",
        "2.8.0b1",
        "2.8.0rc1",
        "2.8.0rc2",
        "2.8.0rc3",
        "2.8.0rc4",
        "2.8.1",
        "2.8.1rc1",
        "2.8.2",
        "2.8.2rc1",
        "2.8.2rc2",
        "2.8.2rc3",
        "2.8.3",
        "2.8.3rc1",
        "2.8.4",
        "2.8.4rc1",
        "2.9.0",
        "2.9.0b1",
        "2.9.0b2",
        "2.9.0rc1",
        "2.9.0rc2",
        "2.9.0rc3",
        "2.9.1",
        "2.9.1rc1",
        "2.9.1rc2",
        "2.9.2",
        "2.9.2rc1",
        "2.9.3",
        "2.9.3rc1",
        "3.0.0",
        "3.0.0b4",
        "3.0.0rc1",
        "3.0.0rc1.post1",
        "3.0.0rc1.post2",
        "3.0.0rc1.post3",
        "3.0.0rc1.post4",
        "3.0.0rc2",
        "3.0.0rc3",
        "3.0.0rc4",
        "3.0.1",
        "3.0.1rc1",
        "3.0.2",
        "3.0.2rc1",
        "3.0.2rc2",
        "3.0.3",
        "3.0.3rc1",
        "3.0.3rc2",
        "3.0.3rc3",
        "3.0.3rc4",
        "3.0.3rc5",
        "3.0.3rc6",
        "3.0.4",
        "3.0.4rc1",
        "3.0.4rc2",
        "3.0.5",
        "3.0.5rc1",
        "3.0.5rc2",
        "3.0.5rc3",
        "3.0.6",
        "3.0.6rc1",
        "3.0.6rc2",
        "3.1.0",
        "3.1.0b1",
        "3.1.0b2",
        "3.1.0rc1",
        "3.1.0rc2",
        "3.1.1",
        "3.1.1rc1",
        "3.1.1rc2",
        "3.1.2",
        "3.1.2rc1",
        "3.1.2rc2",
        "3.1.3",
        "3.1.3rc1",
        "3.1.4",
        "3.1.4rc1",
        "3.1.4rc2",
        "3.1.5",
        "3.1.5rc1",
        "3.1.6",
        "3.1.6rc1",
        "3.1.7",
        "3.1.7rc1",
        "3.1.7rc2",
        "3.1.8",
        "3.1.8rc1",
        "3.1.8rc2",
        "3.2.0",
        "3.2.0b1",
        "3.2.0b2",
        "3.2.0rc1",
        "3.2.0rc2",
        "3.2.1",
        "3.2.1rc1",
        "3.2.1rc2",
        "3.2.1rc3",
        "3.2.2",
        "3.2.2rc1",
        "3.2.2rc2",
        "3.2.2rc3",
        "3.3.0",
        "3.3.0b1",
        "3.3.0b2",
        "3.3.0rc1",
        "3.3.0rc2",
        "3.3.1rc1",
        "3.3.1rc2"
      ]
    }
  ],
  "aliases": [
    "CVE-2026-68076",
    "GHSA-75mg-c62r-v95g"
  ],
  "details": "Apache Airflow\u0027s environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team\u0027s scope. The guard meant to prevent this only ran when no team scope was supplied, and its pattern could not match a team name containing an underscore, which team names are allowed to contain. When the guard did not apply, the lookup fell through to an unconditional global read that resolved the stored `AIRFLOW_CONN__\u003cTEAM\u003e___\u003cID\u003e` variable regardless of which team asked. In multi-team mode an authenticated user of one team could therefore have `POST /api/v2/connections/test` resolve another team\u0027s Connection and authenticate outward with that team\u0027s credentials; the endpoint uses the credentials rather than returning them. Exploitation requires `[core] multi_team` enabled, `[core] test_connection` set to `Enabled` (it ships `Disabled`), team-scoped secrets provisioned as environment variables in the API-server process, and knowledge of the encoded identifier. Redirecting the test at an attacker-controlled host is separately blocked. Users are advised to upgrade to apache-airflow 3.3.1 or later.",
  "id": "PYSEC-2026-3709",
  "modified": "2026-08-19T13:09:03.207169Z",
  "published": "2026-08-12T16:17:15.223Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://www.openwall.com/lists/oss-security/2026/08/12/11"
    },
    {
      "type": "ADVISORY",
      "url": "https://lists.apache.org/thread/v4mc51dgmrc1t82mhzsngsgzo2gxsf2l"
    },
    {
      "type": "FIX",
      "url": "https://github.com/apache/airflow/pull/70736"
    },
    {
      "type": "FIX",
      "url": "https://github.com/apache/airflow/pull/70902"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-75mg-c62r-v95g"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-68076 (GCVE-0-2026-68076)

bit-airflow-2026-68076

Vulnerability from bitnami_vulndb

CLEANSTART-2026-ZG38480 (CVE-2026-68076)

FKIE_CVE-2026-68076

GHSA-75MG-C62R-V95G

PYSEC-2026-3709

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour