Apache Airflow Yandex provider (Lockbox secrets backend, team-scope lookup): When the team-scoped lookup for a

Impact

When the team-scoped lookup for a Connection or Variable id misses, the Lockbox backend retries the id against the team-agnostic path. In a multi-team deployment, a caller in one team can craft an id that names another team's namespace and retrieve that team's secret in full. Those secrets are typically the credentials pipelines use to reach object storage, registries and cluster APIs, so a cross-team read here is a cross-tenant credential handover on whatever the other team's jobs can touch. No unusual configuration is needed beyond multi-team mode plus this backend.

Who can reach it

Any authenticated Airflow user or Dag author scoped to one team in a multi-team deployment using the Yandex Lockbox secrets backend. Single-team deployments have no boundary to cross.

What to do

Upgrade apache-airflow-providers-yandex to 4.5.1 or later and restart the scheduler, triggerer and workers so the new provider is loaded; no node drain needed. Rotate any secret that a team other than its owner could have resolved.

References

Related entries

• Airflow Amazon provider: AWS secrets backends fall through to a team-agnostic lookup, leaking other teams' credentialsCVE-2026-68872 · Apache Airflow Amazon provider (SSM Parameter Store / Secrets Manager backends)Medium
• Airflow: bulk Variable and Connection endpoints write secrets to the audit log in cleartextCVE-2026-68969 · Apache Airflow (audit-log masking on bulk Variables/Connections endpoints)Medium
• Airflow Task SDK: Variables whose JSON value is a list are not masked in task logs or rendered templatesCVE-2026-68970 · Apache Airflow Task SDK (secret masking for list-valued Variables)Medium
• Airflow: asset materialization authorizes the Dag without its team, letting one team trigger another's runsCVE-2026-68971 · Apache Airflow (asset materialize endpoint and wait_dag_run_until_finished XCom check)Medium
• GitLab CE/EE: authenticated user can stall background job processing via missing object count limitsCVE-2026-77801 · GitLab CE/EE (background job processing)Medium
• Schneider Electric Data Center Expert - SOAP service endpoints: XML external entity processing on DCE SOAP endpointsCVE-2026-8045 · Schneider Electric Data Center Expert - SOAP service endpointsMedium