Apache Airflow: masker misses team-prefixed config sections, exposing team Celery broker URLs with credentials

Impact

The secrets masker matched only base section and option names and never normalized team-prefixed sections, so in multi-team mode a team-scoped sensitive option went out unmasked while its global equivalent was correctly hidden. A Viewer with nothing but configuration-read access reads a team's Celery broker URL, credentials embedded, giving them the message broker that carries that team's task execution - the path to observing and injecting work. The advisory is explicit that this is a distinct bypass from CVE-2026-48828 and CVE-2026-48892: a deployment that upgraded to 3.3.0 for those is still exposed here. Requires multi-team mode enabled and the Config API exposed.

Who can reach it

Network access to the Airflow UI or API as an authenticated Viewer holding only configuration-read permission, on a multi-team deployment with the Config API exposed.

What to do

Upgrade to apache-airflow 3.3.1 or later, which normalizes team-scoped sections before the sensitivity check, and restart the API server. Rotate the broker credentials for every team whose config was readable, and disable Config API exposure if you do not need it. Control-plane restart only.

References

Related entries

• Airflow Google provider: team scope dropped in Secret Manager backend, so one team resolves another's credentialsCVE-2026-68868 · Apache Airflow Google provider (Google Cloud Secret Manager secrets backend, team scoping)Medium
• Apache Airflow Yandex provider (Lockbox secrets backend, team-scope lookup): When the team-scoped lookup for aCVE-2026-68871 · Apache Airflow Yandex provider (Lockbox secrets backend, team-scope lookup)Medium
• Airflow Amazon provider: AWS secrets backends fall through to a team-agnostic lookup, leaking other teams' credentialsCVE-2026-68872 · Apache Airflow Amazon provider (SSM Parameter Store / Secrets Manager backends)Medium
• Airflow: bulk Variable and Connection endpoints write secrets to the audit log in cleartextCVE-2026-68969 · Apache Airflow (audit-log masking on bulk Variables/Connections endpoints)Medium
• Airflow Task SDK: Variables whose JSON value is a list are not masked in task logs or rendered templatesCVE-2026-68970 · Apache Airflow Task SDK (secret masking for list-valued Variables)Medium
• Airflow: asset materialization authorizes the Dag without its team, letting one team trigger another's runsCVE-2026-68971 · Apache Airflow (asset materialize endpoint and wait_dag_run_until_finished XCom check)Medium