Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Airflow Akeyless provider

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-86465

    Apache Airflow Akeyless provider: Akeyless secrets backend: team-scope guard bypass via user-controlled key

    Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-controlled key. In a multi-team deployment, a Dag author scoped to one team can supply a Variable key containing a path separator that causes the bac…

    Apache Software Foundation Apache Airflow Akeyless provider