Airflow Akeyless provider: path-shaped Variable key bypasses the team-scope guard on secret lookup

Impact

After a team-scoped lookup misses, the Akeyless backend concatenates an unvalidated, user-controlled key into the lookup path, so a key containing a path separator resolves a secret owned by a different team. The Execution API Variables route accepts a path-shaped key, which makes this reachable from ordinary Dag code rather than needing UI or admin access - any Dag author in a multi-team deployment can read another team's credentials. Vendors tracked the same class separately for the Azure Key Vault, Yandex Lockbox and Amazon backends (CVE-2026-68870, CVE-2026-68871, CVE-2026-68872); they are distinct packages with distinct fixes. Single-team deployments are unaffected.

Who can reach it

A Dag author or authenticated caller scoped to one team in a multi-team Airflow deployment using the Akeyless secrets backend. Reachable from normal Dag code through the Execution API.

What to do

Upgrade apache-airflow-providers-akeyless to 0.3.1 or later and restart scheduler, triggerer and workers. Rotate Akeyless-held secrets that a foreign team could have resolved.

References

Related entries

• Jenkins Bitbucket Push and Pull Request Plugin: webhook payload can redirect credentialed requestsCVE-2026-92139 · Jenkins Bitbucket Push and Pull Request Plugin (webhook-supplied URLs)Medium
• Ceph (Python bindings, IMAP4_SSL/SMTP_SSL TLS clients): Ceph's Python code constructs imaplib.IMAP4_SSL andNCVD-2024-010-ceph-python-bindings-imap4-ssl-s · Ceph (Python bindings, IMAP4_SSL/SMTP_SSL TLS clients)Medium
• rclone (serve s3): Path traversal in rclone's S3 gateway lets a caller read and overwrite files above the served root.NCVD-2026-042-rclone-serve-s3 · rclone (serve s3)Medium
• KubeEdge CloudHub (viaduct packer, pkg/viaduct/pkg/packer): ONE COMPROMISED EDGE NODE TAKES DOWN CLOUD-EDGENCVD-2026-053-kubeedge-cloudhub-viaduct-packer · KubeEdge CloudHub (viaduct packer, pkg/viaduct/pkg/packer)Medium
• GitLab CE/EE: pipeline creation race lets a developer act in the context of another user's merge request commitCVE-2024-11222 · GitLab CE/EE (pipeline creation race condition)Medium
• Ansible Automation Platform images: group-writable /etc/passwd lets a container user become root in-containerCVE-2025-57847 · Red Hat Ansible Automation Platform container images (/etc/passwd permissions)Medium