CVE-2026-68872 Missing authorization in Apache Airflow Amazon provider
Attackers in multi-team Airflow deployments can bypass team scoping to read secrets from other teams via AWS SSM or Secrets Manager backends.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-68872?
CVE-2026-68872 is a medium-severity missing authorization vulnerability in Apache Airflow Amazon provider, published on 10 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in one team could resolve a secret belonging to another team by supplying an id that spells out that team's namespace, obtaining its credentials in full. No unusual configuration is required beyond enabling multi-team mode and using one of these backends. Users are advised to upgrade to apache-airflow-providers-amazon 9.34.0 or later, which refuses the team-agnostic fall-through for an id that could name a team namespace.
Weakness: CWE-639
Which versions are affected by CVE-2026-68872?
1 open source package ship an affected version, including apache-airflow-providers-amazon. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
apache-airflow-providers-amazon PyPI | All versions | 9.34.0 |
Products include Apache Apache-Airflow-Providers-Amazon.
How do I fix CVE-2026-68872?
Upgrade apache-airflow-providers-amazon to 9.34.0 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-68872 being exploited?
There is no known exploitation of CVE-2026-68872 in the wild and no public exploit code.
Other vulnerabilities in Apache Airflow Amazon provider
- CVE-2023-25956 Apache Airflow AWS Provider: Arbitrary file read via AWS provider
- CVE-2026-25604 Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass
- CVE-2026-42526 Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends
Sources
Also known as CLEANSTART-2026-VM33357, GHSA-984p-rgj2-h89x, PYSEC-2026-3713.