CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-68872

The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed. In a deployment running multi-team mode with either backend, a caller in one team could resolve a secret belonging to another team by supplying an id that spells out that team's namespace, obtaining its credentials in full. No unusual configuration is required beyond enabling multi-team mode and using one of these backends. Users are advised to upgrade to apache-airflow-providers-amazon 9.34.0 or later, which refuses the team-agnostic fall-through for an id that could name a team namespace.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 14.1%

CVSS Severity

CVSS v3 Score 6.5

References

Products affected by CVE-2026-68872

Apache » Apache-Airflow-Providers-Amazon » Version: 1.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:1.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 1.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:1.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 1.2.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:1.2.0
Apache » Apache-Airflow-Providers-Amazon » Version: 1.3.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:1.3.0
Apache » Apache-Airflow-Providers-Amazon » Version: 1.4.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:1.4.0
Apache » Apache-Airflow-Providers-Amazon » Version: 2.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:2.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 2.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:2.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 2.2.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:2.2.0
Apache » Apache-Airflow-Providers-Amazon » Version: 2.3.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:2.3.0
Apache » Apache-Airflow-Providers-Amazon » Version: 2.4.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:2.4.0
Apache » Apache-Airflow-Providers-Amazon » Version: 2.5.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:2.5.0
Apache » Apache-Airflow-Providers-Amazon » Version: 2.6.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:2.6.0
Apache » Apache-Airflow-Providers-Amazon » Version: 3.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:3.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 3.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:3.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 3.1.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:3.1.1
Apache » Apache-Airflow-Providers-Amazon » Version: 3.2.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:3.2.0
Apache » Apache-Airflow-Providers-Amazon » Version: 3.3.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:3.3.0
Apache » Apache-Airflow-Providers-Amazon » Version: 3.4.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:3.4.0
Apache » Apache-Airflow-Providers-Amazon » Version: 4.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:4.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 4.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:4.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 5.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:5.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 5.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:5.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 6.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:6.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 6.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:6.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 6.2.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:6.2.0
Apache » Apache-Airflow-Providers-Amazon » Version: 7.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:7.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 7.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:7.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 7.2.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:7.2.0
Apache » Apache-Airflow-Providers-Amazon » Version: 7.2.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:7.2.1
Apache » Apache-Airflow-Providers-Amazon » Version: 7.3.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:7.3.0
Apache » Apache-Airflow-Providers-Amazon » Version: 7.4.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:7.4.0
Apache » Apache-Airflow-Providers-Amazon » Version: 7.4.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:7.4.1
Apache » Apache-Airflow-Providers-Amazon » Version: 8.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.10.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.10.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.11.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.11.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.12.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.12.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.13.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.13.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.14.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.14.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.15.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.15.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.16.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.16.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.17.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.17.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.18.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.18.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.19.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.19.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.2.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.2.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.20.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.20.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.21.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.21.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.22.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.22.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.23.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.23.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.24.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.24.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.25.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.25.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.26.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.26.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.27.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.27.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.28.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.28.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.29.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.29.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.3.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.3.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.3.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.3.1
Apache » Apache-Airflow-Providers-Amazon » Version: 8.4.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.4.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.5.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.5.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.5.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.5.1
Apache » Apache-Airflow-Providers-Amazon » Version: 8.6.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.6.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.7.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.7.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.7.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.7.1
Apache » Apache-Airflow-Providers-Amazon » Version: 8.8.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.8.0
Apache » Apache-Airflow-Providers-Amazon » Version: 8.9.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:8.9.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.0.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.0.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.1.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.1.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.10.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.10.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.11.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.11.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.12.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.12.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.13.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.13.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.14.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.14.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.15.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.15.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.16.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.16.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.17.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.17.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.18.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.18.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.18.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.18.1
Apache » Apache-Airflow-Providers-Amazon » Version: 9.19.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.19.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.2.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.2.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.20.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.20.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.21.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.21.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.22.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.22.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.23.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.23.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.24.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.24.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.25.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.25.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.26.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.26.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.27.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.27.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.28.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.28.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.29.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.29.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.30.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.30.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.31.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.31.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.32.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.32.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.33.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.33.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.4.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.4.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.5.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.5.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.6.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.6.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.6.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.6.1
Apache » Apache-Airflow-Providers-Amazon » Version: 9.7.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.7.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.8.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.8.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.9.0

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.9.0
Apache » Apache-Airflow-Providers-Amazon » Version: 9.9.1

cpe:2.3:a:apache:apache-airflow-providers-amazon:9.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-68872

Products

Pricing

Contact Us