CVE-2026-42526 json
Apache Airflow Amazon provider: Prevent unauthorized access to team-scoped secrets in AWS Secrets Manager and SSM Parameter Store backends
published 5mo ago modified 3mo ago also EUVD-2026-30974 , GHSA-g9qc-qf28-hhqx , PYSEC-2026-595
- cvss
- 5.3
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 35%
- public exploits
- 0
- none known
Summary
In the AWS Secrets Manager and SSM Parameter Store secrets backends of `apache-airflow-providers-amazon` prior to 9.28.0, the team-scoping logic could resolve a `conn_id` containing a `/` (e.g. `"my_team/conn"`) to the same path as another team's team-scoped secret when the caller had no team context. A privileged caller without team context could therefore retrieve another team's secret by crafting a colliding `conn_id`. Fixed in 9.28.0 by switching the team-scope separator to `--` and rejecting team-shaped `conn_id`s when team context is absent. Affects the experimental multi-tenant teams feature only. Users are recommended to upgrade to `apache-airflow-providers-amazon` 9.28.0, which fixes the issue.
Patch / fix
- pypi apache-airflow-providers-amazon 9.28.0
- Apache Software Foundation Apache Airflow Amazon provider 9.28.0
- github.com/apache/airflow#65703 pull request
Is CVE-2026-42526 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5mo ago
Exploit prediction
0.41% chance of exploitation in the next 30 days, higher than 35% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
| GitHub | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CNA | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 5.3 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow-providers-amazon | <9.28.0 |
9.28.0 |
Affected products
- Apache Software Foundation Apache Airflow Amazon provider
Classification
- Weakness
-
- CWE-863 Incorrect Authorization
References
-
github.com
/apache/airflow/pull/65703
patch, web, issue-tracking
-
lists.apache.org
/thread/0092sz5g520d3qqjb01wd61myqlgjtyn
vendor-advisory, web, mailing-list, advisory
-
openwall.com
/lists/oss-security/2026/05/19/36
web, mailing-list, third-party-advisory, advisory
-
nvd.nist.gov
/vuln/detail/CVE-2026-42526
advisory
-
github.com
/apache/airflow
package
-
github.com
/advisories/GHSA-g9qc-qf28-hhqx
advisory
Sources
- CVE List CVE-2026-42526
- GitHub Advisory GHSA-g9qc-qf28-hhqx
- NVD CVE-2026-42526
- OSV PYSEC-2026-595
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.