Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Airflow Provider for Databricks

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-32794 Public exploit

    Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange

    Improper Certificate Validation vulnerability in Apache Airflow Provider for Databricks. Provider code did not validate certificates for connections to Databricks back-end which could result in a man-of-a-middle attack that traffic is intercepted and manipula…

    Apache Software Foundation Apache Airflow Provider for Databricks apache-airflow PyPI