CVE-2026-68868

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal call boundary, so every lookup resolved against the team-agnostic secret name. In a deployment running multi-team mode with this backend, a task or Dag belonging to one team resolved another team's Connection or Variable, obtaining its credentials in full. No unusual configuration is required beyond enabling multi-team mode and using this backend. Users are advised to upgrade to apache-airflow-providers-google 22.3.0 or later, which builds and applies the team-scoped secret name.

• CWE-1220

• https://github.com/apache/airflow/pull/70869Issue Tracking, Patch
• https://lists.apache.org/thread/03h5y0fmqlh0yf055zlocxh591ozx69xMailing List, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2026/08/12/3Mailing List, Third Party Advisory

Published

Aug 12, 2026

Last Modified

Sep 16, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-68851Buffer over-read in Windows NTFS allows an authorized attack…5.5
• CVE-2026-68852Use of uninitialized resource in Microsoft Account allows an…5.5
• CVE-2026-6886Borg SPM 2007 (Sales Ended in 2008) developed by BorG Techno…9.8
• CVE-2026-68860Dell PowerProtect Data Manager, versions 20.2.0.0 and below,…6.8
• CVE-2026-68861Dell PowerProtect One, versions 20.1.0.0 and below, contain …8.8
• CVE-2026-68863Dell PowerProtect One, versions 20.1.0.0 and below, contain …7.5
• CVE-2026-68869Rejected reason: This CVE ID was assigned in error. Upon fur…
• CVE-2026-6887Borg SPM 2007 (Sales Ended in 2008) developed by BorG Techno…9.8
• CVE-2026-68870The Azure Key Vault secrets backend in Apache Airflow's Micr…5.3
• CVE-2026-68871The Yandex Lockbox secrets backend in Apache Airflow's Yande…6.5
• CVE-2026-68872The AWS Systems Manager Parameter Store and Secrets Manager …6.5
• CVE-2026-68873Insertion of sensitive information into log file in Windows …5.5