CVE-2026-81930 Apache Airflow Snowflake provider: Unvalidated account field redirects SQL API bearer token off-domain
Attackers can redirect SQL API bearer tokens to malicious hosts by manipulating unvalidated connection fields, leading to credential theft.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-81930?
CVE-2026-81930 is a medium-severity server-side request forgery vulnerability in Apache Airflow Snowflake provider, published on 29 Sep 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before interpolating them into request URLs. The SQL API endpoint is built as `https://{account}.snowflakecomputing.com/api/v2/statements`, so an `account` value containing `/`, `?` or `#` demotes the intended domain to a path, query or fragment and leaves the attacker in control of the request host.
The provider sends that request with an `Authorization: Bearer` header carrying a JWT minted from the connection's private key, or the configured OAuth or programmatic access token. A user who can edit the Snowflake connection but cannot read its secrets — Airflow gives connection-configuration users write-only access to stored credentials, and a `private_key_file` lives on the worker rather than in the connection — can therefore cause a valid token for the account to be delivered to a host of their choosing and replay it against the genuine Snowflake endpoint. No Dag-authoring ability is required: the attacker edits the connection and waits for an existing Dag to use it. The same unvalidated value was also used to build the OAuth token-request URL and the Cortex Agent base URL.
Affects deployments where Snowflake connections are editable by users who are not trusted with the connection's credentials. Users are advised to upgrade to `apache-airflow-providers-snowflake` `6.18.0` or later, which rejects `account` and `region` values containing anything other than letters, digits, `.`, `_` and `-` in every URL the provider builds from them.
Weakness: CWE-522
Which versions are affected by CVE-2026-81930?
1 open source package ship an affected version, including apache-airflow-providers-snowflake. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
apache-airflow-providers-snowflake PyPI | All versions | 6.18.0 |
Products include Apache Apache-Airflow-Providers-Snowflake.
How do I fix CVE-2026-81930?
Upgrade apache-airflow-providers-snowflake to 6.18.0 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-81930 being exploited?
There is no known exploitation of CVE-2026-81930 in the wild and no public exploit code.
Other vulnerabilities in Apache Airflow Snowflake provider
Sources
Also known as GHSA-x776-f7fc-mx6q, PYSEC-2026-4188.