Database/Control plane, storage & DevOps
Airflow Akeyless provider: path-shaped Variable key bypasses the team-scope guard on secret lookup
Impact
After a team-scoped lookup misses, the Akeyless backend concatenates an unvalidated, user-controlled key into the lookup path, so a key containing a path separator resolves a secret owned by a different team. The Execution API Variables route accepts a path-shaped key, which makes this reachable from ordinary Dag code rather than needing UI or admin access - any Dag author in a multi-team deployment can read another team's credentials. Vendors tracked the same class separately for the Azure Key Vault, Yandex Lockbox and Amazon backends (CVE-2026-68870, CVE-2026-68871, CVE-2026-68872); they are distinct packages with distinct fixes. Single-team deployments are unaffected.
Who can reach it
A Dag author or authenticated caller scoped to one team in a multi-team Airflow deployment using the Akeyless secrets backend. Reachable from normal Dag code through the Execution API.
What to do
Upgrade apache-airflow-providers-akeyless to 0.3.1 or later and restart scheduler, triggerer and workers. Rotate Akeyless-held secrets that a foreign team could have resolved.
References
Related entries
- Grafana: Viewer-level user crashes the server with a recursive math expressionCVE-2026-88858 · Grafana (server-side expressions math evaluator)Medium
- Jenkins Bitbucket Push and Pull Request Plugin: webhook payload can redirect credentialed requestsCVE-2026-92139 · Jenkins Bitbucket Push and Pull Request Plugin (webhook-supplied URLs)Medium
- Airflow HashiCorp provider: path-shaped Variable key crosses team scope in the Vault secrets backendCVE-2026-97636 · Apache Airflow HashiCorp provider (Vault secrets backend, team-scoped variable lookup)Medium
- Ceph (Python bindings, IMAP4_SSL/SMTP_SSL TLS clients): Ceph's Python code constructs imaplib.IMAP4_SSL andNCVD-2024-010-ceph-python-bindings-imap4-ssl-s · Ceph (Python bindings, IMAP4_SSL/SMTP_SSL TLS clients)Medium
- rclone (serve s3): Path traversal in rclone's S3 gateway lets a caller read and overwrite files above the served root.NCVD-2026-042-rclone-serve-s3 · rclone (serve s3)Medium
- KubeEdge CloudHub (viaduct packer, pkg/viaduct/pkg/packer): ONE COMPROMISED EDGE NODE TAKES DOWN CLOUD-EDGENCVD-2026-053-kubeedge-cloudhub-viaduct-packer · KubeEdge CloudHub (viaduct packer, pkg/viaduct/pkg/packer)Medium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.