Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Airflow Amazon provider

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-86467

    Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's account

    Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnRequest ID and the callback validates the assertion without requiring a matching…

    Apache Software Foundation Apache Airflow Amazon provider